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Description 

TECHNICAL FIELD 

[0001] The present invention relates to a marking 
forming apparatus, a method of forming a laser marking 
to an optical disk, a reproduction apparatus, an optical 
disk, and a method of manufacturing an optical disk, 
which may be utilized, for example, to prevent duplica- 
tion of optical disks. 

BACKGROUND ART 

[0002] With increasing use of ROM-type optical disks 
in recent years, pirated disks have also been spreading, 
infringing the rights of copyright owners. 
[0003] This is because ROM disk manufacturing ap- 
paratus have been made readily available and also have 
become easy to operate. 

[0004] A pirate can make a CD master disk just by 
extracting logic data from software contained on a CD, 
copying it onto a magnetic tape, and setting the tape on 
a mastering apparatus. Hundreds of thousands of pirat- 
ed disks can be pressed from this single master disk. 
Since pirates do not pay royalties, they make a profit by 
selling pirated disks at a low price. This necessarily 
means a financial loss to the copyright owner. 
[0005] According to the current CD specification, only 
the function of reading logic data from a CD is provided, 
but no functions arc provided to detect physical features 
of a disk. As a result, a pirated CD can be easily pro- 
duced by bit-copying the logic data. 
[0006] The prior art discloses a method of preventing 
piracy by adding a function to recognize disk physical 
features, 

[0007] This method involves establishing a new spec- 
ification that defines the inclusion of a physical mark on 
a master disk to prevent the pirating of disks made to 
this specification. As an example of the prior art, a piracy 
prevention method is known such as the one disclosed 
in Japanese Patent Unexamined Publication No. 
5-3251 93. According to that method, in the cutting proc- 
ess the recording beam is deliberately swept in the 
tracking direction, when recording a designated region, 
to form a wobbling on the master disk. When the disk is 
played back on a reproduction apparatus equipped with 
a wobbling detection circuit, the disk is checked to see 
whether the wobbling is formed in the designated re- 
gion. If it is detected that the wobbling of a designated 
wobbling frequency is formed in the designated region, 
the disk is judged to be a legitimate disk; otherwise, the 
disk is judged to be a pirated disk. 
[0008] More specifically, based on predefined physi- 
cal mark design data, a physical mark is formed on the 
masker disk by using a special mastering apparatus 
equipped with a wobbling function. This prevents pirates 
from making pirated disks since they do not have such 
special mastering apparatus nor physical mark design 



data. Such an anti-piracy mark needs to be formed on 
every disk made to this specification. However, since it 
is possible to extract this physical mark by examining a 
legitimate disk, the prior art method has had the problem 

5 that pirated disks may be made if such a special mas- 
tering apparatus falls into the hands of an illegal person. 
In this patent specification, piracy prevention methods 
of the type that forms a physical mark on the master disk 
will be referred to as master disk level methods. 

10 [0009] Besides the above-described method, there 
has been proposed a more sophisticated master disk 
level method which involves forming a more complicat- 
ed physical mark. On the other hand, a replica method 
is known that makes a replica having exactly the same 

is physical features by melting the resin of a legitimate disk 
no matter how complicated the physical mark is made 
at the master disk level. This method requires much time 
and cost to produce one master disk, but since hundreds 
of thousands of disks can be produced from one pirated 

20 master disk, the cost per pirated disk is low. This has 
therefore given rise to the problem that as the replica 
method becomes widespread in thefuture, it may defeat 
the effectiveness of piracy prevention techniques at the 
master disk level. 

25 [0010] As described above, the prior art piracy pre- 
vention techniques have several problems to be over- 
come. 

[0011] These problems are summarized below. 
[0012] Problem 1: The effectiveness of the master 

so disk level piracy prevention techniques of the prior art is 
low since it is possible to replicate the physical mark, 
[0013] Problem 2: In the prior art method that forms a 
physical mark based on physical mark design data, if a 
manufacturing apparatus of the same precision as the 

35 apparatus used by the legitimate disk manufacturer is 
obtained, illegal disks can be easily manufactured. 
[001 4] Problem 3: Since the security level provided by 
the prior art piracy prevention methods is fixed, its ef- 
fectiveness decreases against constantly improving pi- 

40 rating techniques. 

[0015] Problem 4: If a disk format without copy pro- 
tection were allowed to exist along with a disk format 
with copy protection, pirated disks could be made with 
the disk format without copy protection. It has therefore 

45 been necessary to produce all disks with copy protec- 
tion. The use of copy protection is therefore limited to 
closed specifications such as game disks. 
[0016] Problem 5: According to the prior art methods, 
a limited number of licensing companies possess the 

so special manufacturing apparatus and do not make the 
apparatus public. Therefore, software makers cannot 
make disks except at the licensing companies. 
[0017] Problem6: Inthemaster-diskmarkingmethod, 
all disks pressed from the same master disk have the 

55 same disk ID. This means that all disks can be run by 
using the same password. As a result, password secu- 
rity cannot be maintained unless a floppy disk or a com- 
munication line is used in combination. Furthermore, the 
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password has to be entered each time the disk is used 
since secondary recording is not possible. 

DISCLOSURE OF THE INVENTION 

[0018] In view of the above-outlined problems of the 
prior art, it is an object of the present invention to 
achieve a greatly improved copy prevention capability 
as compared to the prior art. 

[0019] More specifically, the present invention pro- 
vides the following means to overcome the above-out- 
lined six problems of the prior art piracy prevention 
methods. 

[0020] To overcome Problem 1 , a piracy prevention 
method involving the use of a physical mark at a reflec- 
tive film level, rather than the master disk level physical 
mark as used in the prior art, is provided wherein the 
physical mark is formed on a reflective film of a disk. 
This prevents the production of pirated disks if duplica- 
tion is made at the master disk level. 
[0021] To overcome Problem 2, a new ROM-record- 
ing means is used that performs secondary recording to 
a two-disk laminated ROM disk by using a laser. In a 
first step, physical marks are randomly formed, and in 
a second step, the physical marks are measured with a 
measuring accuracy as high as 0.13 urn. In a third step, 
their position information is encrypted and, using the 
secondary recording means, a barcode is recorded to 
the ROM disk with an accuracy of several tens of mi- 
crons which is the usual processing accuracy. Optical 
mark position information can thus be obtained with an 
accuracy of, for example, 0,1 |im, much higher than the 
processing accuracy of a conventional apparatus. Since 
optical marks cannot be formed with the accuracy of 0.1 
H m by using commercially available equipment, produc- 
tion of pirated disks can be prevented. 
[0022] To overcome Problem 3, both a first-genera- 
tion cipher with a low degree of security and a second- 
generation cipher with a high degree of security, each 
enciphering the position information with a digital signa- 
ture, are prerecorded on a medium and by using such 
a medium, piracy is prevented with the security corre- 
sponding to the applicable generation if the design of 
reproduction apparatus changes from one generation to 
the next. 

[0023] To overcome Problem 4, an anti-piracy func- 
tion identifier for indicating whether or not the software 
product is equipped with a copyright anti-piracy function 
is recorded on the master disk. To prevent the identifier 
from being altered, compressed information of software 
contents and the anti-piracy function identifier are 
scrambled and encrypted together when recording the 
software contents on the master disk. Since the identi- 
fier cannot be altered, pirates cannot produce disks with 
a disk format without anti-piracy measures. This pre- 
vents the production of pirated disks. 
[0024] To overcome Problem 5, as a secret key for 
digital signature encryption indispensable for the man- 



ufacture of disks, a subkey is generated from a master 
key, and the subkey is delivered to each software maker, 
thereby allowing the software maker to manufacture le- 
gitimate disks at its own factory. 

5 [0025] To overcome Problem 6, position information 
of an antipiracy mark of the invention, which differs from 
one disk to another, is used as a disk identifier. The po- 
sition information and the disk serial number, i.e., the 
disk ID, are combined and encrypted together with a dig- 

to ital signature, thus appending an unalterable disk ID to 
each disk. Since each completed disk has a different ID, 
the password is also different. The password does not 
work on other disks. This enhances password security. 
[0026] Also, with the secondary recording of the in- 

is vention, the password is secondary-recorded on the 
disk, permanently making the disk an operable disk. 
[0027] Specific methods for overcoming the above six 
problems are disclosed below by way of embodiments. 
[0028] The invention provides a marking forming ap- 

20 paratus comprising: marking forming means for apply- 
ing at least one marking to at least one reflective film 
formed to a disk; marking position detecting means for 
detecting at least one position of said marking; and po- 
sition information output means for outputting said de- 

25 tected position as position information of said marking. 
[0029] The invention also provides a marking forming 
apparatus further comprising position information writ- 
ing means for writing at least said output position infor- 
mation or information concerning said position informa- 

30 tion to said disk or to a different medium, 

[0030] The invention also provides a method of form- 
ing a laser marking to an optical disk, comprising the 
steps of: forming at least one disk; forming a reflective 
film to said formed disk; laminating two disks together, 

35 said disks including at least one disk with said reflective 
film formed thereon; and forming at least one marking 
by a laser on said reflective layer of the laminated disks. 
[0031] The invention also provides a reproduction ap- 
paratus comprising: position information reading means 

40 for reading position information of at least one marking 
orinformation concerning said position information, said 
marking being formed to at least one reflective film 
formed to a disk and being detected for a position there- 
of, at least the position thus detected being output as 

45 said position information of said marking; marking read- 
ing means for reading information concerning at least 
one actual position of said marking; comparing/judging 
means for performing comparison and judgement by us- 
ing a result of reading by said position information read- 
so ing means and a result of reading by said marking read- 
ing means; and reproducing means for reproducing re- 
corded data on said optical disk in accordance with a 
result of the comparison and judgement performed by 
said comparing/judging means. 

55 [0032] The invention also provides a method of man- 
ufacturing an optical disk, comprising the steps of: form- 
ing at least one disk; forming a reflective film to said 
formed disk; applying at least one marking to said re- 
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flectivefilm; detecting at least one position of said mark- 
ing; and outputting said detected position as position in- 
formation of said marking, and encrypting said informa- 
tion for writing to said disk. 

[0033] The invention also provides a method of man- 5 
ufacturing an optical disk, comprising the steps of: form- 
ing at least one disk; forming a reflective film to said 
formed disk; applying at least one marking to said re- 
flectivef ilm; detecting at least one position of said mark- 
ing; and outputting said detected position as position in- 10 
formation of said marking, and applying a digital signa- 
ture in relation to said position information for writing to 
said disk. 

[0034] The invention also provides an optical disk 
wherein at least one marking is formed by a laser to at is 
least one reflective film of the disk holding data written 
thereon and at least position information of said marking 
or information concerning said position information is 
written to said disk in an encrypted form or with a digital 
signature applied thereto. 20 
[0035] The invention also provides an optical disk 
having a structure such that at least one reflective film 
is sandwiched directly or indirectly between two mem- 
bers formed from material resistant to laser light, where- 
in at least one marking is formed by a laser to said re- 25 
flective film. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0036] 30 

Figure 1 is a diagram showing a disk manufacturing 
process and a secondary recording process ac- 
cording to the present embodiment; 
Figure 2(a) is a top plan view of a disk according to 35 
the embodiment, (b) is a top plan view of the disk 
according to the embodiment, (c) is a top plan view 
of the disk according to the embodiment, (d) is a 
transverse sectional view of the disk according to 
the embodiment, and (e) is a waveform diagram of 40 
a reproduced signal according to the embodiment; 
Figure 3 is a flowchart illustrating a process of re- 
cording encrypted position information on a disk in 
the form of a barcode according to the present em- 
bodiment; 45 
Figure 4 is a diagram showing a disk fabrication 
process and a secondary recording process (part 

1) according to the present embodiment; 

Figure 5 is a diagram showing the disk fabrication 
process and the secondary recording process (part so 

2) according to the present embodiment; 

Figure 6 is a diagram showing a two-layer disk fab- 
rication process (part 1) according to the present 
embodiment; 

Figure 7 is a diagram showing the two-layer disk 55 
fabrication process (part 2) according to the present 
embodiment; 

Figure 8(a) is an enlarged view of a nonreflective 



portion of a laminated type according to the present 
embodiment, and (b) is an enlarged view of a non- 
reflective portion of a single-plate type according to 
the present embodiment; 

Figure 9(a) is a reproduced-waveform diagram for 
a nonreflective portion according to the present em- 
bodiment, (b) is a reproduced-waveform diagram 
for a nonreflective portion according to the present 
embodiment, and (c) is a reproduced-waveform di- 
agram for a nonreflective portion according to the 
present embodiment; 

Figure 10(a) is a cross-sectional view of a nonre- 
flective portion of the laminated type according to 
the present embodiment, and (b) is a cross-section- 
al view of a nonreflective portion of the single-plate 
type according to the present embodiment; 
Figure 11 is a schematic diagram, based on an ob- 
servation through a transmission electron micro- 
scope, illustrating a cross section of the nonreflec- 
tive portion according to the present embodiment; 
Figure 12(a) is a cross-sectional view of a disk ac- 
cording to the present embodiment, and (b) is a 
crosssectional view of the nonreflective portion of 
the disk according to the present embodiment; 
Figure 13(a) is a diagram showing a physical ar- 
rangement of addresses on a legitimate CD accord- 
ing to the embodiment, and (b) is a physical ar- 
rangement of addresses on an illegally duplicated 
CD according to the embodiment; 
Figure His a block diagram for disk manufacturing 
according to the embodiment; 
Figure 1 5 is a block diagram of a low-reflectivity po- 
sition detector according to the embodiment; 
Figure 16 is a diagram illustrating the principle of 
detecting address/clock positions of a low-reflectiv- 
ity portion according to the embodiment: 
Figure 17 is a diagram showing a comparison of 
low-reflectivity portion address tables for a legiti- 
mate disk and a duplicated disk; 
Figure 1 8 is aflowchart illustrating a diskcheck pro- 
cedure using a one-direction function according to 
the embodiment; 

Figure 1 9 is a diagram showing a comparison of ad- 
dress coordinate positions on different master disks 
according to the embodiment; 
Figure 20 is a flowchart illustrating a low-reflectivity 
position detecting program according to the embod- 
iment; 

Figure 21 is a block diagram of a magnetic record- 
ing apparatus according to the embodiment: 
Figure 22 is a flowchart illustrating a procedure for 
encryption, etc. using an RSA function according to 
the embodiment; 

Figure 23 is a flowchart illustrating a procedure for 
digital signature, etc. using an elliptic function ac- 
cording to the embodiment; 
Figure 24 is a flowchart illustrating a position infor- 
mation check process according to the embodi- 
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ment; 

Figure 25 is a block diagram of an information 
processing apparatus according to the embodi- 
ment; 

Figure 26 is a top plan view of a second low-reflec- 
tivity portion according to the embodiment; 
Figure 27 is a diagram showing a detected wave- 
form of a first-layer marking signal according to the 
present embodiment; 

Figure 28 is a diagram showing a detected wave- 
form of a second-layer marking signal according to 
the present embodiment; 

Figure 29 is a block diagram of a disk manufacturing 
apparatus according to the present embodiment; 
Figure 30 is a code diagram for a nonreflective por- 
tion according to the present embodiment: 
Figure 31 is a diagram showing a detected wave- 
form from the nonreflective portion according to the 
present embodiment; 

Figure 32 is a diagram for explaining the contents 
of barcode recorded information and the relative re- 
lationship thereof according to the present embod- 
iment; 

Figure 33 is a perspective view showing the nonre- 
flective portion formed in the two-layer disk accord- 
ing to the present embodiment; 
Figure 34 is a diagram for explaining data flow in 
disk distribution according to the present embodi- 
ment; 

Figure 35 is a diagram showing a process of disk 
distribution according to the present embodiment; 
Figure 36 Is a block diagram for explaining a man- 
ufacturing process when applying complex encryp- 
tion to position information, etc. by using a master 
key sub key, etc. according to the present embodi- 
ment; 

Figure 37 is a block diagram for explaining the man- 
ufacturing process when applying complex encryp- 
tion to position information, etc. by using the master 
key, subkey, etc. according to the present embodi- 
ment; 

Figure 38 is a flowchart in a reproduction apparatus 
according to the present embodiment; 
Figure 39 is a diagram showing a secret key cipher 
and a public key cipher used in combination on op- 
tical disks and their relationship with reproduction 
apparatus according to the present embodiment; 
Figure 40 is a block diagram showing an outline of 
a process of recording position information, etc., en- 
crypted with a master key, subkey, etc., on an opti- 
cal disk and a process of reproducing such informa- 
tion according to the present embodiment: 
Figure 41 is a block diagram of an optical disk re- 
production apparatus according to the present em- 
bodiment; and 

Figure 42 is a flowchart illustrating the function of a 
scramble identifier and the switching between drive 
ID and disk ID in a program installation process ac- 



cording to the present embodiment. 

BEST MODE FOR CARRYING OUT THE INVENTION 

5 [0037] The constitution and operation of a marking 
forming apparatus, a method of forming a laser marking 
to an optical disk, a reproduction apparatus, an optical 
disk, and a method of manufacturing an optical disk will 
be described below in accordance with an embodiment 
10 of the present invention. 

[0038] In the description of the present embodiment 
given herein, the first half part (1) deals with such oper- 
ations as manufacturing a disk, forming a marking by 
using a laser, reading position information of the mark- 
's ing, performing encryption and other processing on the 
position information, etc. for writing on an optical disk, 
and reproducing the optical disk on a player. The en- 
cryption and reproduction operations are briefly de- 
scribed in the first part (1). 
20 [0039] Next, in the second half part (2). the encryption 
and other processing of the marking position informa- 
tion, etc. and the decryption and reproduction of the po- 
sition information, etc. on the optical disk, briefly de- 
scribed in the first part (1), will be described in further 
25 detail. The second part (2) also deals with various tech- 
niques for preventing piracy. 

[0040] In this patent specification, lasertrimming is al- 
so referred to as laser marking, while a nonreflective op- 
tical marking portion is simply referred to as the marking 
30 or optical marking or, sometimes, as the physical ID 
unique to the disk, 

(1 ) Figure 1 is a flowchart illustrating a general process 
flow from disk manufacturing to the completion of an 
35 optical disk. 

[0041] First, the software company performs software 
authoring in software production process 820. The com- 
pleted software is delivered from the software company 

40 to the disk manufacturing factory. In disk manufacturing 
process 81 6 at the disk manufacturing factory, the com- 
pleted software is input in step 818a, a master disk is 
produced (step 818b), disks are pressed (steps 81 8e, 
81 8g), reflectivefilms are formed on the respective disks 

45 (steps 81 Bf, 81 8h), the two disks are laminated together 
(step 81 8i), and a ROM disk such as a DVD or CD is 
completed (step 818m, etc.). 

[0042] The thus completed disk 800 is delivered to the 
software maker or to a factory under control of the soft- 

so ware maker, where, in secondary recording process 
817, an anti-piracy marking 584, such the one shown in 
Figure 2, is formed (step 819a), and accurate position 
information of this mark is read by a measuring means 
(step 819b) to obtain the position information which 

55 serves as the physical feature information of the disk. 
This physical feature information of the disk is encrypted 
in step 81 9c. The encrypted information is converted to 
a PWM-modulated signal which is then recorded in step 
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81 9d as a barcode signal on the disk by using a laser. 
The disk physical feature information may be combined 
togetherwith software feature information for encryption 
in step 819c. 

[0043] The above processes will be described in fur- 
ther detail. That is, a disk fabrication process, a marking 
formation process, a marking position reading process, 
and an encrypted information writing process for an op- 
tical disk according to the present invention will be de- 
scribed in detail with reference to Figures 4 and 5 and 
Figures 8 to 12. A supplementary explanation will also 
be given dealing with a disk having two reflective layers 
with reference to Figures 6 and 7. In the following de- 
scription, the marking formation process and the mark- 
ing position reading process are collectively called the 
secondary recording process. 

[0044] (A) First, the diskfabrication process will be de- 
scribed. In the disk fabrication process 806 shown in 
Figure 4, first a transparent substrate 801 is pressed in 
step (1). In step (2), a metal such as aluminum or gold 
is sputtered to form a reflective layer 802. An adhesive 
layer 804 formed from an ultraviolet curing resin is ap- 
plied by spin coating to a substrate 803 formed in a dif- 
ferent processing step, and the substrate 803 is bonded 
to the transparent substrate 801 having the reflective 
layer 802, and they are rotated at high speed to make 
the bonding spacing uniform. By exposure to external 
ultraviolet radiation, the resin hardens, thus firmly bond- 
ing the two substrates together. In step (4), a printed 
layer 805 where a CD or DVD title is printed, is printed 
by screen printing or offset printing. Thus, in step (4), 
the ordinary laminated-type optical ROM disk is com- 
pleted. 

[0045] (B) Next, the marking formation process will be 
described with reference to Figures 4 and 5. In Figure 
4, a laser beam from a pulsed laser 81 3 such as a YAG 
laser is focused through a converging lens 814 onto the 
reflective layer 802, to form a nonreflective portion 815 
as shown in step (6) in Figure 5. That is, a distinct wave- 
form, such as the waveform (A) shown in step (7), is 
reproduced from the nonreflective portion 815 formed 
instep (6) in Figure 5. By slicing this waveform, a mark- 
ing detection signal such as shown by waveform (B) is 
obtained, from which hierarchial marking position infor- 
mation comprising an address, such as shown in signal 
(d), and an address, a frame synchronizing signal 
number, and a reproduced clock count, such as shown 
in signal (e), can be measured. 
[0046] As previously stated, a supplementary expla- 
nation will be given below of an alternative type of disk 
(a two-layer laminated disk) with reference to Figures 6 
and 7. 

[0047] Figures 4 and 5 showed a disk generally 
known as a single-layer laminated disk which has a re- 
flective layer only on one substrate 801 . On the other 
hand, Figures 6 and 7 show a disk generally known as 
a two-layer laminated disk which has reflective layers 
on both substrates 801 and 803. For laser trimming, the 



processing steps (5) and (6) are fundamentally the 
same for both types of disks, except with significant dif- 
ferences which are briefly described below. First, while 
the single-layer disk uses a reflective layer formed from 

5 an aluminum film having reflectivity as high as 70% or 
over, in the two-layer disk the reflective layer 801 formed 
on the reading-side substrate 801 is a semi-transparent 
gold (Au) film having a reflectivity of 30%, while the re- 
flective layer 802 formed on the print-side substrate 803 

10 is the same as that used in the single-layer disk. Second, 
as compared with the single-layer disk, the two-layer 
disk is required to have high optical accuracy; for exam- 
ple, the adhesive layer 804 must be optically transparent 
and be uniform in thickness, and the optical transparen- 

is cy must not be lost due to laser trimming. Figures 7(7), 
7(8), and 7(9) show the waveform from the first layer of 
the two-recording-layer disk. The waveform from the 
second layer is similar to that from the first layer, though 
the signal level is lower than from the first layer. How- 

20 ever, since the first and second layers are bonded to- 
gether, relative positional accuracy between them is 
random and can be controlled only with an accuracy of 
a few hundred microns. As will be described later, since 
the laser beam passes through the two reflective films, 

25 to make an illegal disk the position informations on the 
first and second layers for the first mark, for example, 
have to be made to match the same value on the legit- 
imate disk. But making them match would require a 
near-submicron accuracy in laminating, and conse- 

30 qucntly, making illegal disks of the two-layer type is 
practically impossible. 

[0048] The technique for forming the nonreflective op- 
tical marking portion will be described in further detail in 
sections (a) to (d) below with reference to Figures 8 to 

35 12, etc., dealing with the laminated type in comparison 
with a single-plate type. Figures 8(a) and (b) are micro- 
graphs showing plan views of nonreflective optical 
marking portions, and Figure 1 0 is a simplified schemat- 
ic cross-sectional view of a nonreflective portion of the 

40 two-layer laminated disk. 

(a) Using a 5 [i j/pulse YAG laser, a laser beam was 
applied to a 500-angstrom aluminum layer lying 0.6 
mm below the surface of a 1 .2-mm thick ROM disk 

45 consisting of two 0.6-mm thick disks laminated to- 
gether, and, as a result, a 12-u. m wide slit-like non- 
reflective portion 815 was formed, as shown in the 
X 750 micrograph of Figure 8(a). In this X 750 mi- 
crograph, no aluminum residues were observed on 

so the nonreflective portion 815. Thick swollen alumi- 
num layers. 2000 angstroms thick and 2 |i m wide, 
were observed along boundaries between the non- 
reflective portion 815 and reflective portions. As 
shown in Figure 1 0(a), it was confirmed that no sig- 

55 nificant damage had occurred inside. In this case, 
the application of the pulsed laser presumably melt- 
ed the aluminum reflective layer, causing a phe- 
nomenon of molten aluminum buildup along the 
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boundaries on both sides due to the surface ten- 
sion. We call this a hot melt surface tension (HMST) 
recording method. This is a characteristic phenom- 
enon observed only on a laminated disk 800. Figure 
11 is a schematic diagram, based on an observation 5 
through a transmission electron microscope (TEM), 
illustrating a cross section of the nonreflective por- 
tion formed by the above lasertrimming process. In 
thefigure, if the aluminumfilm swollen portion is 1 .3 
|i m wide and 0.20 u m thick, the amount of in- 10 
creased aluminum in that portion is 1.3 x (0.20 - 
0.05) = 0.195 |i m 2 . The amount of aluminum orig- 
inally deposited in a half portion (5 u. m) of the laser 
exposed region (1 0 u. m) was 5 x 0.05 = 0.250 u. m 2 . 
The difference is calculated as 0.250 - 0.195 = is 
0.055 |i m 2 . In terms of length, this is equivalent to 
0.055/0.05 = 1 . 1 |i m. This means that an aluminum 
layer of 0.05 u. m thickness and 1 .1 u. m length re- 
mained, and therefore, it can be safely said that al- 
most all aluminum was drawn to the film swollen 20 
portion. Thus, the result of the analysis of the figure 
also verifies the explanation about the above-de- 
scribed characteristic phenomenon. 

(b) We will next deal with the case of a single-plate 
optical disk (an optical disk comprising a single 25 
disk). An experiment was conducted by applying la- 
ser pulses of the same power to a 0.05 \i m thick 
aluminum reflective film formed on a single-sided 
molded disk, of which result is shown in Figure 8(b). 

As shown in thefigure, aluminum residues were ob- 30 
served, and since these aluminum residues cause 
reproduction noise, it can be seen that the single- 
plate type is not suitable for secondary recording of 
optical disk information of which a high density and 
a low error rate are demanded. Furthermore, unlike 35 
the laminated disk, in the case of the single-plate 
disk, the protective layer 862 is inevitably damaged, 
as shown in Figure 10(b), when the nonreflective 
portion is subjected to laser trimming. The degree 
of damage depends on the laser power, but the 40 
damage cannot be avoided even if the laser power 
is controlled accurately. Moreover, according to our 
experiment, the printed layer 805 formed by screen 
printing to a thickness of a few hundred microns on 
the protective layer 862 was damaged when its 45 
thermal absorptance was high. In the case of the 
single-plate disk, to address the problem of protec- 
tive layer damage, either the protective layer has to 
be applied once again or the laser cut operation 
should be performed before depositing the protec- so 
tive layer. In any case, the single-plate type may 
present a problem in that the laser cut process has 
to be incorporated in the pressing process. This lim- 
its the application of the single-plate disk despite its 
usefulness. 55 

(c) A comparison between single-plate disk and 
laminated disk has been described above, using a 
two-layer laminated disk as an example. As is ap- 



parent from the above description, the same effect 
as obtained with the two-layer laminated disk can 
be obtained with the single-layer laminated disk. 
Using Figures 12(a), 12(b), etc., a further descrip- 
tion will be given dealing with the single-layer type. 
As shown in Figure 12(a), the reflective layer 802 
has the transparent substrate 801 of polycarbonate 
on one side, and the hardened adhesive layer 804 
and a substrate on the other side, the reflective lay- 
er 802 thus being hermetically sealed therebe- 
tween. In this condition, pulsed laserlightisfocused 
thereon for heating; in the case of our experiment, 
heat of 5 u. J/pulse is applied to a circular spot of 1 0 
to 20 a. m diameter on the reflective layer 802 for a 
short period of 70 ns. As a result, the temperature 
instantly rises to 600°C, the melting point, melting 
state is caused. By heat transfer, a small portion of 
the transparent substrate 801 near the spot is melt- 
ed, and also a portion of the adhesive layer 804 is 
melted. The molted aluminum in this state is caused 
by surface tension to build up along boundaries 
821a and 821b, with tension being applied to both 
sides, thus forming buildups 822a and 822b of hard- 
ened aluminum, as shown in Figure 12(b). The non- 
reflective portion 584 free from aluminum residues 
is thus formed. This shows that a clearly defined 
nonreflective portion 584 can be obtained by laser- 
trimming the laminated disk as shown in Figure 10 
(a). Exposure of the reflective layer to the outside 
environment due to a damaged protective layer, 
which was the case with the single-plate type, was 
not observed even when the laser power was in- 
creased more than 1 0 times the optimum value. Af- 
ter the laser trimming, the nonreflective layer 584 
has the structure shown in Figure 12(b) where it is 
sandwiched between the two transparent sub- 
strates 801 and sealed on both sides with the ad- 
hesive layer 804 against the outside environment, 
thus producing the effect of protecting the structure 
from environmental effects, 
(d) Another benefit of laminating two disks together 
will be described next. When secondary recording 
is made in the form of a barcode, an illegal manu- 
facturer can expose the aluminum layer by remov- 
ing the protective layer in the case of a single-plate 
disk, as shown in Figure 10(b). This gives rise to a 
possibility that nonecrypted data may be tampered 
with by redepositing an aluminum layer over the 
barcode portion on a legitimate disk and then laser- 
trimming a different barcode. For example, if the ID 
number is recorded in plaintext or separately from 
main ciphertext, in the case of a single-plate disk it 
is possible to alter the ID number, enabling illegal 
use of the software by using a different password. 
However, if the secondary recording is made on the 
laminated disk as shown in Figure 10(a), it is difficult 
to separate the laminated disk into two sides. In ad- 
dition, when removing one side from the other, the 
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aluminum reflective film is partially destroyed. 
When the anti-piracy marking is destroyed, the disk 
will be judged as being a pirated disk and will not 
run. Accordingly when making illegal alterations to 
the laminated disk, the yield is low and thus illegal 
alterations are suppressed for economic reasons. 
Particularly, in the case of the two-layer laminated 
disk, since the polycarbonate material has temper- 
ature/humidity expansion coefficients, it is nearly 
impossible to laminate the two disks, once separat- 
ed, by aligning the anti-piracy markings on the first 
and second layers with an accuracy of a few mi- 
crons, and to mass produce disks. Thus, the two- 
layer type provides a greater effectiveness in piracy 
prevention. It was thus found that a clearly defined 
slit of a nonreflective portion 584 can be obtained 
by laser-trimming the laminated disk 800. 

[0049] The techniqueforforming the nonreflective op- 
tical marking portion has been described in (a) to (d) 
above. 

[0050] (C) Next, the process of reading the position of 
the thus formed marking will be described. 
[0051] Figure 15 is a block diagram showing a low re- 
flectivity light amount detector 586 for detecting the non- 
reflective optical marking portion, along with its adjacent 
circuitry, in an optical disk manufacturing process. Fig- 
ure 1 6 is a diagram illustrating the principle of detecting 
address/clock positions of the low reflectivity portion. 
For convenience of explanation, the following descrip- 
tion deals with the operating principle when a read op- 
eration is performed on a nonreflective portion formed 
on an optical disk constructed from a single disk. It will 
be recognized that the same operating principle also ap- 
plies to an optical disk constructed from two disks lam- 
inated together. 

[0052] As shown in Figure 15, the disk 800 is loaded 
into a marking reading apparatus equipped with a low 
reflectivity position detector 600 to read the marking, 
and in this case, since a signal waveform 823 due to the 
presence and absence of pits and a signal waveform 
824 due to the presence of the nonreflective portion 584 
are significantly different in signal level, as shown in the 
waveform diagram of Figure 9(a), they can be clearly 
distinguished using a simple circuit. 
[0053] The start position and end position of the non- 
reflective portion 564 having the above waveform can 
be easily detected by the low reflectivity light amount 
detector 586 shown in the block diagram of Figure 15. 
Using the reproduced clock signal as the reference sig- 
nal, position information is obtained in a low reflectivity 
position information output section 596. 
[0054] As shown in Figure 15, a comparator 587 in 
the low reflectivity light amount detector 586 detects the 
low reflectivity light portion by detecting an analog light 
reproduced signal having a lower signal level than a light 
amount reference value 588. During the detection peri- 
od, a low reflectivity portion detection signal of the wave- 



form shown in Figure 1 6(5) is output. The addresses and 
clock positions of the start position and end position of 
this signal are measured. 

[0055] The reproduced light signal is waveshaped by 

5 a waveform shaping circuit 590 having an AGC 590a, 
for conversion into a digital signal. A clock regenerator 
38a regenerates a clock signal from the waveshaped 
signal. An EFM demodulator592 in a demodulating sec- 
tion 591 demodulates the signal, and an ECC corrects 

10 errors and outputs a digital signal. The EFM-demodu- 
lated signal is also fed to a physical address output sec- 
tion 593 where an address of MSF, from Q bits of a sub- 
code in the case of a CD, is output from an address out- 
put section 594 and a synchronizing signal, such as a 

'5 frame synchronizing signal, is output from a synchroniz- 
ing signal output section 595. From the clock regenera- 
tor 38a. a demodulated clock is output. 
[0056] In a low reflectivity portion address/clock sig- 
nal position signal output section 596, a low reflectivity 

20 portion start/end position detector 599 accurately meas- 
ures the start posistion and end position of the low re- 
flectivity portion 584 by using an (n-1) address output 
section 597 and an address signal as well as a clock 
counter 598 and a synchronizing clock signal or the de- 

25 modulated clock. This method will be described in detail 
by using the waveform diagrams shown in Figure 1 6. As 
shown in the cross-sectional view of the optical disk in 
Figure 16(1), the low reflectivity portion 584 of mark 
number 1 is formed partially. A reflection selope signal 

30 such as shown in Figure 16(3), is output, the signal level 
from the reflective portion being lower than the light 
amount reference value 588. This is detected by the light 
level comparator 587, and a low reflectivity light detec- 
tion signal, such as shown in Figure 1 6(5), is output from 

35 the low reflectivity light amount detector 586. As shown 
by a reproduced digital signal in Figure 16(4), no digital 
signal is output from the mark region since it does not 
have a reflective layer. 

[0057] Next, to obtain the start and end positions of 

40 the low reflectivity light detection signal, the demodulat- 
ed clock or synchronizing clock shown in Figure 16(6) 
is used along with address information. First, a refer- 
ence clock 605 at address n in Figure 1 6(7) is measured. 
When the address immediately preceding the address 

45 n is detected by the (n-1 ) address output section 597, it 
is found that the next sync 604 is a sync at address n. 
The number of clocks from the synch 604 to the refer- 
ence clock 605, which is the start position of the low re- 
flectivity light detection signal, is counted by the clock 

so counter 598. This clock count is defined as a reference 
delay time TD which is measured by a reference delay 
time TD measuring section 608 for storage therein. 
[0058] The circuit delay time varies with reproduction 
apparatus used for reading, which means that the ref- 

55 erence delay time TD varies depending on the repro- 
duction apparatus used. Therefore, using the TD, a time 
delay corrector 607 applies time correction, and the re- 
sulting effect is that the start clock count for the low re- 
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flectivity portion can be measured accurately if repro- 
duction apparatus of different designs are used for read- 
ing. Next, by finding the clock count and the start and 
end addresses for the optical mark No. 1 in the next 
track, clock m+14 at address n+12 is obtained, as 
shown in Figure 1 6(8) . Since TD = m + 2, the clock count 
is corrected to 12, but for convenience of explanation, 
n+14 is used. We will describe another method, which 
eliminates the effects of varying delay times without hav- 
ing to obtain the reference delay time TD in the repro- 
duction apparatus used for reading. This method can 
check whether the disk is a legitimate disk or not by 
checking whether the positional relationship of mark 1 
at address n in Figure 1 6(8) relative to another mark 2 
matches or not. That is, TD is ignored as a variable, and 
the difference between the position. A1 = a1 + TD, of 
mark 1 measured and the position, A2 = a2 + TD, of 
mark 2 measured is obtained, which is given as A1 - A2 
= a1 - a2. At the same time; it is checked whether this 
difference matches the difference, a1 - a2, between the 
position a1 of the decrypted mark 1 and the position in- 
formation a2 ofthemark2,therebyjudgingwhetherthe 
disk is a legitimate disk or not. The effect of this method 
is that the positions can be checked after compensating 
for variations of the reference delay time TD by using a 
simpler constitution. 

[0059] (D) Next, the encrypted information writing 
process will be described. The position information read 
in the process (C) is encrypted (digital signature), as will 
be described in detail in the next section (2); and is writ- 
ten on the optical disk using a barcode or other method. 
Figure 3 shows how this is done. In Figure 3(1), the re- 
flective layer is trimmed by a pulsed laser, and a bar- 
code-like trimming pattern, such as shown in Figure 3 
(2), is formed. At a reproduction apparatus (player), an 
envelope waveform some portions of which are missing 
as shown in Figure 3(3) is obtained. The missing por- 
tions generate a low level signal which is different from 
a signal generated from an ordinary pit, and this signal 
is sliced by a second slice level comparator to obtain a 
low reflectivity portion detection signal as shown in Fig- 
ure 3(4). From this low reflectivity portion detection sig- 
nal, a PWM demodulator 621 in Figure 3(5) demodu- 
lates the signal containing encrypted information. 
[0060] The processing steps in the optical disk man- 
ufacturing process have been described above. Next, 
the constitution and operation of a reproduction appa- 
ratus (player) for reproducing the thus completed optical 
disk on a player will be described with reference to Fig- 
ure 41. 

[0061] In the figure, the construction of an optical disk 
9102 will be described first. A marking 9103 is formed 
on a reflective layer (not shown) deposited on the optical 
disk 9102. In the manufacturing process of the optical 
disk, the position of the marking 9103 was detected by 
position detecting means, and the detected position was 
encrypted as marking position information and written 
on the optical disk in the form of a barcode 91 04. 



[0062] Position information reading means 9101 
reads the barcode 9104, and decrypting means 9105 
contained therein decrypts the contents of the barcode 
for output. Marking reading means 9106 reads the ac- 

5 tual position of the marking 91 03 and outputs the result. 
Comparing/judging means 91 07 compares the decrypt- 
ed result from the decrypting means 91 05 contained in 
the position information reading means 9101 with the 
result of reading by the marking reading means 9106, 

to and judges whether the two agree within a predeter- 
mined allowable range. If they agree, a reproduction sig- 
nal 9 1 08 for reproducing the optical disk is output; if they 
do not agree, a reproduction stop signal 91 09 is output. 
Control means (not shown) controls the reproduction 

'5 operation of the optical disk in accordance with these 
signals; when the reproduction stop signal is output, an 
indication to the effect that the optical disk is an illegal 
duplicated disk is displayed on a display (not shown) 
and the reproduction operation is stopped. In the above 

20 operation, it will be recognized that it is also possible for 
the marking reading means 9106 to use the decrypted 
result from the decrypting means 91 05 when reading the 
actual position of the marking 9103. 
[0063] Thus the reproduction apparatus of the above 

25 construction can detect an illegally duplicated optical 
disk and stop the reproduction operation of the disk, and 
can prevent illegal duplicates practically, 
[0064] The foregoing description has dealt with the 
process from optical disk manufacturing to the repro- 

30 duction operation of the player, and wc will now proceed 
to a description of appertaining matters relating to the 
details of the above process. 

[0065] (A) A low reflectivity portion address table, 
which is a position information listforthe low reflectivity 
35 portion, will be explained. 

(a) Laser markings are formed at random in the anti- 
piracy mark formation process at the factory. No la- 
ser markings formed in this manner can be identical 

40 in physical feature. In the next process step, the low 
reflectivity portion 584 formed on each disk is meas- 
ured with a resolution of 0.13 u. m in the case of a 
DVD, to construct a low reflectivity portion address 
table 609 as shown in Figure 13(a). Here, Figure 13 

45 (a) is a diagram showing a low reflectivity portion 
address table, etc. for a legitimate CD manufac- 
tured in accordance with the present embodiment, 
and Figure 13(b) is concerned with an illegally du- 
plicated CD. The low reflectivity portion address ta- 

so ble 609 is encrypted using a one-direction function 
such as the one shown in Figure 1 8, and in the sec- 
ond reflective-layer forming step, aseries of low re- 
flectivity portions 584c to 584e, where the reflective 
layer is removed, is recorded in a barcode-like pat- 

55 tern on the innermost portion of the disk, as shown 
in Figure 2. Alternatively, it may be recorded on a 
magnetic recording portion 67 of a CD-ROM, as 
shown in Figure 14. Figure 18 is a flowchart illus- 
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trating a disk check procedure by the oneway func- 
tion used forthe encryption, and Figure 1 4 is a block 
diagram of a disk making apparatus and a special 
recording/reproduction apparatus. As shown in Fig- 
ure 1 3, the legitimate CD and the illegally duplicated 5 
CD have the low reflectivity portion address tables 
609 and 609x, respectively, which are substantially 
different from each other. One factor resulting in this 
difference is that laser markings identical in physical 
feature cannot be made, as earlier noted. Another 10 
factor is that the sector address preassigned to the 
disk is different if the master disk is different. 

Referring now to Figure 13, we will describe 
how the marking position information differs be- 
tween the legitimate disk and pirated disk. The fig- is 
ure shows an example in which the above two fac- 
tors are combined. In the example shown, two 
markings are formed on one disk. In the case of the 
legitimate CD, the first marking of mark number 1 
is located at the 262nd clock position from the start 20 
point of the sector of logical address A1 , as shown 
in the address table 609. In the case of a DVD, one 
clock is equivalent to 0.13 |i m, and the measure- 
ment is made with this accuracy. On the other hand, 
in the case of the pirated CD, the first marking is 25 
located at the 81st clock position in the sector of 
address A2, as shown in the address table 609x. 
By detecting this difference of the first marking po- 
sition between the legitimate disk and pirated disk, 
the pirated disk can be distinguished. Likewise, the 30 
position of the second marking is also different. To 
make the position information match that of the le- 
gitimate disk, the reflective film at the 262nd posi- 
tion in the sector of address Al must be formed with 
an accuracy of one clock unit, i.e., 0.13 u. m; other- 35 
wise, the pirated disk cannot be run. 

Accordingly, as shown in Figure 14, in the re- 
production apparatus, the encrypted table is de- 
crypted to reconstruct the legitimate table which is 
then checked by a check program 535 to differenti- 40 
ate between the legitimate disk and illegally dupli- 
cated disk, and to stop the reproduction operation 
in the case of a duplicated disk. In the example of 
Figure 1 6, the legitimate disk and illegally duplicat- 
ed disk have low reflectivity portion address tables 45 
609 and 609x respectively, where values are differ- 
ent as shown in Figure 17. In the case of the legiti- 
mate disk, in the track following the mark 1 the start 
and end positions are m+1 4 and m + 267, respective- 
ly, as shown in Figure 16(8), whereas in the case of so 
the illegally duplicated disk these are m+24 and 
m+277, respectively, as shown in Figure 16(9). 
Therefore, the corresponding values in the low re- 
flectivity portion address tables 609 and 609x are 
different, as shown in Figure 1 7, thus making it pos- 55 
sible to distinguish the duplicated disk. If an illegal 
manufacturer desires to make a copy of the disk 
having the low reflectivity portion address table 609, 



they will have to perform a precise laser trimming 
operation with the resolution of the reproduced 
clock signal as shown in Figure 16(8). In the case 
of a DVD disk, the period T of the reproduced clock 
pulse, when converted to a distance on the disk, is 
0.13 u m as shown in Figure 27(5). Accordingly, to 
make an illegal copy, the reflective film will have to 
be removed with a submicron resolution of 0.1 |im. 
It is true that when an optical head designed for an 
optical disk is used, a recording can be made on a 
recording film such as a CD-R with a submicron res- 
olution. But in this case, the reproduced waveform 
will be as shown in Figure 9(c), and the distinct 
waveform 824 as shown in Figure 9(a) cannot be 
obtained unless the reflective film is removed. 

(b) A first method of achieving mass production of 
pirated disks by removing the reflective film may be 
by laser trimming using a high output laser such as 
a YAG laser. At the present state of technology, 
even the most highly accurate machining laser trim- 
ming can only achieve a processing accuracy of a 
few microns. In the lasertrimming for semiconduc- 
tor mask corrections, it is said that 1 |x m is the limit 
of the processing accuracy. This means that it is dif- 
ficult to achieve a processing accuracy of 0.1 |i m 
at the mass production level. 

(c) As a second method, X-ray exposure equipment 
for processing semiconductor masks for VLSIs and 
ton beam processing equipment are known at the 
present time as equipment that can achieve a 
processing accuracy of the order of submicrons, but 
such equipment is very expensive and furthermore, 
it takes much time to process one piece of disk, and 
if each disk were processed using such equipment, 
the cost per disk would be very high. At the present 
time, therefore, the cost would become higher than 
the retail price of most legitimate disks, so that mak- 
ing pirated disks would not pay and meaningless. 

(d) As described above, with the first method that 
involves lasertrimming, it is difficult to process with 
a submicron accuracy, and therefore, it is difficult to 
mass produce pirated disks. On the other hand, with 
the second method using the submicron processing 
technology such as X-ray exposure, the cost per 
disk is so high that making pirated disks is mean- 
ingless from an economic point of view. Accordingly, 
making illegal copies can be prevented until some 
day in the future when low-cost submicron process- 
ing technology for mass production becomes prac- 
tical. Since practical implementation of such tech- 
nology will be many years into the future, production 
of pirated disks can be prevented. In the case of a 
two-layer disk with a low reflectivity portion formed 
on each layer as shown in Figure 33, an illegally 
duplicated disk cannot be manufactured unless the 
pits on top and bottom are aligned with good accu- 
racy when laminating, and this enhances the effec- 
tiveness in preventing piracy. 
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[0066] (B) Next, we will describe how the arrange- 
ment angle of the low reflectivity portion on the disk can 
be specified. 

[0067] In the present invention, sufficient effective- 
ness in piracy prevention is provided by the reflective 
layer level mechanism, that is, by the low reflective 
marking alone. In this case, the prevention is effective 
even if the master disk is a duplicate. 
However, the effectiveness can be enhanced by com- 
bining it with the piracy prevention technique at the mas- 
ter disk level. If the arrangement angle of the low reflec- 
tivity portion on the disk is specified as shown in Table 
532a and Table 609 in Figure 13(a), an illegal manufac- 
turer would have to accurately duplicate even the ar- 
rangement angle of each pit on the master disk. This 
would increase the cost of pirated disks and hence en- 
hance the capability to deter piracy. 
[0068] (C) The points of the present invention will be 
summarized below. In the present invention, a legitimate 
manufacturer can make a legitimate disk by processing 
the disk using a general-purpose laser trimming appa- 
ratus having a processing accuracy of several tens of 
microns. Though a measuring accuracy of 0.13 U. m is 
required, this can be achieved by conventional circuitry 
contained in a consumer DVD player. By encrypting the 
measured result with a secret encryption key, a legiti- 
mate disk can be manufactured. That is, the legitimate 
manufacturer need only have a secret key and a meas- 
uring apparatus with a measuring accuracy of 0.13 urn, 
while the required processing accuracy is two or three 
orders of magnitude lower, that is, several tens of mi- 
crons. This means that a convectional laser processing 
apparatus can be used. On the other hand, an illegal 
manufacturer, who does not have a secret key, will have 
to directly copy the encrypted information recorded on 
the legitimate disk. This means that a physical mark cor- 
responding to the encrypted position information, that 
is, the position information on the legitimate disk, must 
be formed with a processing accuracy of 0.13 u. m. That 
is, the low reflective mark has to be formed using a 
processing apparatus having a processing accuracy 
two orders of magnitude higherthan that of the process- 
ing apparatus used by the legitimate manufacturer. Vol- 
ume production with an accuracy higher by two orders 
of magnitude, i.e., with an accuracy of 0.1 u.m, is difficult 
both technically and economically, even in the foresee- 
able future. This means that production of pirated disks 
can be prevented during the life of the DVD standard. 
One point of the invention is to exploit the fact that the 
measuring accuracy is generally a few orders of magni- 
tude higherthan the processing accuracy. 
[0069] I n the case of CLV, the above method exploits 
the fact that the address coordinate arrangement differs 
from one master disk to another, as previously noted. 
Figure 19 shows the result of the measurement of ad- 
dress locations on actual CDs. Generally, there are two 
types of master disk, one recorded by rotating a motor 
at a constant rotational speed, i.e., with a constant an- 



gular velocity (CAV), and the other recorded by rotating 
a disk with a constant linear velocity (CLV). In the case 
of a CAV disk, since a logical address is located on a 
predetermined angular position on the disk, the logical 

5 address and its physical angular position on the disk are 
exactly the same no matter how many master disks are 
made. On the other hand, in the case of a CLV disk, 
since only the linear velocity is controlled, the angular 
position of the logical address on the master disk is ran- 

10 dom. Ascan beseenfromtheresultofthemeasurement 
of logical address locations on actual CDs in Figure 19, 
the tracking pitch, start point, and linear velocity vary 
slightly from disk to disk even if exactly the same data 
is recorded using the same mastering apparatus, and 

is these errors accumulate, resulting in different physical 
locations. In Figure 1 9, the locations of each logical ad- 
dress on a first master disk are indicated by white cir- 
cles, and the locations on second and third master disks 
are indicated by black circles and triangles, respectively. 

20 As can be seen, the physical locations of the logical ad- 
dresses vary each time the master disk is made. Figure 
17 shows the low reflectivity portion address tables for 
a legitimate disk and an illegally duplicated diskfor com- 
parison. 

25 [0070] The method of piracy prevention at the master 
disk level has been described above. This is, when mas- 
ter disks of CLV recording, such as a CD or DVD, are 
made from the same logic data by using a mastering 
apparatus, as shown in Figure 1 9, the physical location 

so of each pit on the disk varies between master disks, that 
is, between the legitimate disk and pirated disk.This 
method distinguishes a pirated disk from a legitimate 
disk by taking advantage of this characteristic. The pi- 
racy prevention technology at the master disk level can 

35 prevent pirated disks at the logic level made by simply 
copying data only from the legitimate disk. However, re- 
cent years have seen the emergence of pirate manufac- 
turers equipped with more advanced technologies, who 
can make a master disk replica identical in physical fea- 

40 ture to a legitimate disk by melting the polycarbonate 
substrate of the legitimate disk. In this case, the piracy 
prevention method at the master disk level is defeated. 
To prevent this new threat of pirated disk production, the 
present invention has devised the piracy prevention 

45 method at the reflective layer level wherein a marking is 
formed on a reflective film. 

[0071] According to the method of the present inven- 
tion, the marking is formed on each disk pressed from 
a master disk, even if disks are pressed from the master 

so disk, by removing a portion of the reflective film in the 
reflectivefilm formation process. As a result, the position 
and shape of the resulting low reflective marking is dif- 
ferent from one disk to another. In a usual process, it is 
next to impossible to partially remove the reflective film 

55 with an accuracy of submicrons. This serves to enhance 
the effectiveness in preventing duplication since dupli- 
cating the disk of the invention does not justify the cost. 
[0072] Figure 20 shows a flowchart for detecting a du- 
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plicated CD by using the low reflectivity portion address 
table. The delay time needed to detect the optical mark 
varies only slightly due to the optical head and circuit 
designs of the reproduction apparatus used. This of the 
delay time TD circuit can be predicted at the design 
stage or at the time of mass production. The optical mark 
position information is obtained by measuring the 
number of clocks, that is, the time, from the frame syn- 
chronizing signal. Due to the effect of the circuit delay 
time, an error may be caused to detected data of the 
optical mark position information. As a result, a legiti- 
mate disk may be erroneously judged as being a pirated 
disk, inconveniencing a legitimate user. A measure to 
reduce the effect of the circuit delay time TD will be de- 
scribed below. Further, a scratch made on a disk after 
purchase may cause an interruption in the reproduced 
clock signal, causing an error of a few clocks in the 
measurement of the optical mark position information. 
To address this problem, a tolerance 866 and a pass 
count 867, shown in Figure 27, are recorded on a disk, 
and while allowing a certain degree of tolerance on the 
measured value according to the actual situation at the 
time of reproduction, the reproduction operation is per- 
mitted when the pass count 867 is reached; the margin 
allowed for an error due to a surface scratch on the disk 
can be controlled by the copyright owner prior to the 
shipment of the disk. This will be described with refer- 
ence to Figure 20. 

[0073] In Figure 20, the disk is reproduced in step 
865a to recover the encrypted position information from 
the barcode recording portion or pit recording portion of 
the present invention. In step 865b, decryption or signa- 
ture verification is performed, and in step 865c, a list of 
optical mark position information is recovered. Next, if 
the delay time TD of a reproduction circuit is stored in 
the circuit delay time storing section 608a in the repro- 
duction apparatus of Figure 15, TD is read out in step 
865h and the process proceeds to step 865x. If TD is 
not stored in the reproduction apparatus, or if a meas- 
urement instruction is recorded on the disk, the process 
proceeds to step 865d to enter a reference delay time 
measurement routine. When address Ns-1 is detected, 
the start position of the next address Ns is found. The 
frame synchronizing signal and the reproduced clock 
are counted, and in step 865f , the reference optical mark 
is detected. In step 865g, the circuit delay time TD is 
measured and stored. This operation is the same as the 
operation to be described later with reference to Figure 
16(7). In step 865x, the optical mark located inside ad- 
dress Nm is measured. In steps 865i, 865j, 865k, and 
865m. the optical mark position information is detected 
with a resolution of one clock unit, as in steps 865d, 
865y, 865f, and 865y. Next, in step 865n, a pirated disk 
detection routine is entered. First, the circuit delay time 
TD is corrected. In step 865p, the tolerance 866, i.e., tA, 
and pass count 867 recorded on the disk, as shown in 
Figure 27, are read to check whether or not the position 
information measured in step 865g falls within the toler- 
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ancetA. If the result is OK in step 865r, then in step 865s 
it is checked whether the checked mark count has 
reached the pass count. If the result is OK, then in step 
865u the disk is judged as being a legitimate disk and 

5 reproduction is permitted. If the pass count is not 
reached yet, the process returns to step 865z. If the re- 
sult is NO in step 865r, then it is checked in step 865f 
whether the error detection count is smaller than NA, 
and only when the result is OK, the process returns to 

10 step 865s. If it is not OK, then in step 865v the disk is 
judged as being an illegal disk and the operation is 
stopped 

[0074] As described, since the circuit delay time TD 
of the reproduction apparatus is stored in the IC ROM, 

'5 optical mark position information can be obtained with 
increased accuracy. Furthermore, by setting the toler- 
ance 866 and pass count for the software on each disk, 
the criteria for pirated disk detection can be changed ac- 
cording to the actual condition to allow for a scratch 

20 made on the disk after purchase. This has the effect of 
reducing the probability of a legitimate disk being erro- 
neously judged as an illegal disk. 
[0075] (D) A further description will be given of the op- 
eration of reading the nonreflective optical marking por- 

25 tion of the two-disk laminated optical disk, focusing on 
points that were not touched on in the foregoing descrip- 
tion of the operating principle. 
[0076] That is, as shown in Figure 16, the start posi- 
tion address number, frame number, and clock number 

30 can be measured accurately with a resolution of 1 T unit, 
that is, with a resolution of 0.13 u. m in the case of the 
DVD standard, by using a conventional player, thereby 
to accurately measure the optical mark of the present 
invention. Figures 27 and 28 show the optical mark ad- 

35 dress reading method of Figure 16 as applied to the 
DVD standard. Explanation of signals (1), (2), (3), (4), 
and (5) in Figures 27 and 28 will not be given here since 
the operating principle is the same as that shown in Fig- 
ure 16. 

40 [0077] The correspondence between Figure 16, 
which illustrates the principle of the detection operation 
for detecting the position of a low reflectivity portion on 
a CD, and Figures 27 and 28, which are concerned with 
a DVD, is given below. 

45 [0078] Figure 16(5) corresponds to Figures27(1) and 
28(1 ). The reproduced clock signal in Figure 1 6(6) cor- 
responds to that shown in Figures 27(5) and 28(5). Ad- 
dress 603 in Figure 1 6(7) corresponds to that shown in 
Figures 27(2) and 28(2). 

so [0079] Frame synch 604 in Figure 1 6(7) corresponds 
to that shown in Figures 27(4) and 28(4). Starting clock 
number 605a in Figure 1 6(8) corresponds to reproduced 
channel clocknumberin Figure 27(6). Instead of the end 
clock number 606 in Figure 1 6(7), in Figures 27(7) and 

55 28(7) data is compressed using a 6-bit marking length. 
[0080] As illustrated, the detection operation is funda- 
mentally the same between CD and DVD. A first differ- 
ence is that a 1 -bit mark layer identifier 603a as shown 
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in Figure 27(7) is included for identifying whether the 
low reflectivity portion is of the one-layer type or two- 
layer type. The two-layer DVD structure provides a 
greater anti-piracy effect, as previously described. A 
second difference is that since the line recording density 
is nearly two times as high, 1 Tofthe reproduced clock 
is as short as 0.13 u. m, which increases the resolution 
forthe detection of the position information and thus pro- 
vides a greater anti-piracy effect. 
[0081] Shown in Figure 27 is the signal from the first 
layer in a two-layer optical disk having two reflective lay- 
ers. The signal (1) shows the condition when the start 
position of an optical mark on the first layer is detected. 
Figure 28 shows the condition of the signal from the sec- 
ond layer. 

[0082] To read the second layer, a first/second layer 
switching section 827 in Figure 1 5 sends a switching sig- 
nal to a focus control section 828 which then controls a 
focus driving section 829 to switch the focus from the 
first layerto the second layer. From Figure 27, it is found 
that the mark is in address (n). and by counting the frame 
synchronizing signal (4) using a counter, it is found that 
the mark is in frame 4. From signal (5), the PLL repro- 
duced clock number is found, and the optical marking 
position data as shown by the signal (6) is obtained. Us- 
ing this position data, the optical mark can be measured 
with a resolution of 0. 1 3 u. m on a conventional consum- 
er DVD player. 

[0083] (E) Additional matters relating to the two-disk 
laminated optical disk will be further described below. 
[0084] Figure 28 shows address position information 
pertaining to the optical marking formed on the second 
layer. Since laser light penetrates the first and second 
layers through the same hole, as shown in the process 
step (b)(sic) in Figure 7, the nonreflective portion 815 
formed on the first reflective layer 802 and the nonre- 
flective portion 826 formed on the second reflective lay- 
er 825 are identical in shape. This is depicted in the per- 
spective view of Figure 33. In the present invention, after 
the transparent substrate 801 and the second substrate 
803 are laminated together laser light is applied pene- 
trating through to the second layer to form an identical 
mark thereon. In this case, since coordinate arrange- 
ments of pits are different between the first and second 
layers, and since the positional relationship between the 
first and second layers is random when laminating them 
together, the pit positions where the mark is formed are 
different between the first and second layers, and en- 
tirely different position information is obtained from each 
layer. These two kinds of position information are en- 
crypted to produce an anti-piracy disk. If it is attempted 
to duplicate this disk illegally, the optical marks on the 
two layers would have to be aligned with a resolution of 
about 0.13 u. m. As previously described, at the present 
state of technology it is not possible to duplicate the disk 
by aligning the optical marks with the pits with an accu- 
racy of 0.13 u. m, that is, with an accuracy of the order 
of 0.1 u, m, but there is a possibility that mass production 
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technology may be commercially implemented in the fu- 
ture that enables large quantities of single-layer disks 
to be trimmed with a processing accuracy of 0.1 |i m at 
low cost. Even in that case, since the top and bottom 
5 disks are trimmed simultaneously in the case of the two- 
layer laminated disk 800, the two disks must be laminat- 
ed together with the pit locations and optical marks 
aligned with an accuracy of a few microns. However, it 
is next to impossible to laminate the disks with this ac- 
10 curacy because of the temperature coefficient, etc. of 
the polycarbonate substrate. When optical marks were 
formed by applying laser light penetrating through the 
two-layer disk 800, the resulting anti-piracy mark is ex- 
tremely difficult to duplicate. This provides a greater an- 
15 ti-piracy effect. The optical disk with an anti-piracy 
mechanism is thus completed. For piracy prevention ap- 
plications, in cases where the disk process and laser cut 
process are inseparable as in the case of the single- 
plate type, the encryption process, which is an integral 
20 part of the laser cut process, and processing involving 
a secret encryption key have to be performed at the disk 
manufacturing factory. This means that in the case of 
the single-plate type the secret encryption key main- 
tained in the software company have to be delivered to 
25 the disk manufacturing factory. This greatly reduces the 
security of encryption. On the other hand, according to 
the method involving laser processing of laminated 
disks, which constitutes one aspect of the invention, the 
laser trimming process can be completely separated 
30 from the disk manufacturing process. Therefore, laser 
trimming and encryption operations can be performed 
at a factory of the software maker, Since the secret en- 
cryption key that the software maker keeps need not be 
delivered to the disk manufacturing factory, the secret 
35 key for encryption can be kept in the safe custody of the 
software maker. This greatly increases the security of 
encryption. 

[0085] (2) (A) Encryption (digital signature) of marking 
position information, etc. and decryption and reproduc- 
40 tion of optical disk position information, etc., which have 
been briefly described in (1), will now be described in 
more detail. (B) Various mechanism for piracy preven- 
tion will also be described below. 
[0086] (A) Encryption (digital signature) and its repro- 
45 duction will be described. 

(a) Simple encryption (digital signature) 

(Implementation by RSA function) 

50 

[0087] First, an example of encryption in which en- 
cryption is performed using a function of a message re- 
covery type signature method, such as an RSA function, 
will be described with reference to the flowcharts shown 
55 in Figures 22 and 24. 

[0088] As shown in Figure 22, the process consists of 
the following major routines: step 735a where marking 
position information is measured atthe optical disk mak- 
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er, step 695 where the position information is encrypted 
(or a digital signature is appended), step 698 where the 
position information is decrypted (orthe signature is ver- 
ified or authenticated) in the reproduction apparatus, 
and step 735w where a check is made to determine 
whether the disk is a legitimate optical disk or not. 
[0089] First, in step 735a, the marking position infor- 
mation on the optical disk is measured in step 735b. The 
position information is then compressed in step 735d, 
and the compressed position information H is obtained 
in step 735e. 

[0090] In step 695, the ciphertext of the compressed 
position information H is constructed. First, in step 695, 
a secret key, d, of 512 or 1024 bits, and secret keys, p 
and q, of 256 or 51 2 bits, are set, and in step 695b, en- 
cryption is performed using an RSA function. When the 
position information H is denoted by M, M is raised to d- 
th power and mod n is calculated to yield ciphertext C. 
In step 695d, the ciphertext C is recorded on the optical 
disk. The optical disk is thus completed and is shipped 
(step 735 k). 

[0091] In the reproduction apparatus, the optical disk 
is loaded in step 735m, and the ciphertext C is decrypted 
in step 698. More specifically, the ciphertext C is recov- 
ered in step 698e, and public keys, e and n, are set in 
step 698f ; then in step b, to decrypt the ciphertext C, the 
ciphertext C is raised to e-th power and the mod n of the 
result is calculated to obtain plaintext M. The plaintext 
M is the compressed position information H. An error 
check may be performed in step 698g. If no errors, it is 
decided that no alterations have been made to the po- 
sition information, and the process proceeds to the disk 
check routine 735w shown in Figure 24. If an error is 
detected, it is decided that the data is not legitimate one, 
and the operation is stopped, 

[0092] I n the next step 736a : the compressed position 
information H is expanded to recover the original posi- 
tion information. In step 736c, measurements are made 
to check whether the marking is actually located in the 
position on the optical disk indicated by the position in- 
formation. In step 736d, it is checked whetherthe differ- 
ence between the decrypted position information and 
the actually measured position information falls within a 
tolerance. If the check is OK in step 736e, the process 
proceeds to step 736h to output software or data or ex- 
ecute programs stored on the optical disk. If the check 
result is outside the tolerance, that is, if the two pieces 
of position information do not agree, a display is pro- 
duced to the effect that the optical disk is an illegally 
duplicated one, and the operation is stopped in step 
736g. RSA has the effect of reducing required capacity 
since only the ciphertext need be recorded. 

(Implementation by elliptic function) 

[0093] N ext, anoth e r ty pe of sig natu re system , th at is , 
an imprint type signature system using an elliptic func- 
tion for encryption, will be described with reference to 
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the flowcharts shown in Figures 23 and 24. 
[0094] As shown in Figure 23, etc., the process con- 
sists of the following major routines: step 735a where 
marking position information is measured at the optical 

5 disk maker, step 735f where authentication ciphertext (i. 
e., signature) for the position information is computed, 
step 735n where position information authentication 
(signature verification) is performed in the reproduction 
apparatus, and step 735w where a check is made to de- 

10 termine whether the disk is a legitimate optical disk or 
not. 

[0095] The process from step 735a to step 735e is the 

same as that for the RSA function. 

[0096] In step 735f, authentication ciphertext for the 

J5 compressed position information H is constructed. First, 
in step 735g, secret keys X (128 bits or over) and K are 
set, and in step 735h, a public system parameter G, a 
point on an ellipse, is determined, and with f (x) as a one- 
direction function, R = f(KxG) is obtained first, and then 

20 R' = f(R) is obtained; then from equation S = (Kx R - H) 
X" 1 modQ, R and S as authentication ciphertext are gen- 
erated. In step 735j, the authentication ciphertext R and 
S and the plaintext H of the compressed position infor- 
mation are recorded on the optical disk, and in step 

25 735k, the completed disk is shipped. 

[0097] In the reproduction apparatus, the optical disk 
is loaded in step 735m, and an authentication operation 
is performed in step 735n to authenticate the position 
information. 

30 [0098] First, in step 735p, the authentication cipher- 
text R and S and the compressed position information 
H are recovered from the loaded optical disk. In step 
735r, public keys Y, G. and Q are set, and in step 735s, 
an authentication operation is performed whereby f(A x 
35 Y + B x G) is obtained from A = SR' 1 mod Q and B = 
HR" 1 mod Q. In step 735t, it is checked if the above value 
matches R. Ifthey match, it is decided that no alterations 
have been made to the position information, and the 
process proceeds to the optical disk check routine 735w 
40 in Figure 24. If they do not match, it is decided that the 
data is not legitimate one, and the operation is stopped. 
[0099] The subsequent process from step 736a to 
step 736g is the same as that for the RSA function. That 
is, if the optical disk is judged as being an illegally du- 
45 plicated one, a display to that effect is produced, and in 
step 736g, the operation is stopped. Compared to the 
RSA function, the elliptic function has the advantage 
that the computation time is short, which serves to re- 
duce the time before the reproduction starts. This sys- 
so tern therefore is suitable for application to consumer re- 
production apparatus. 

(b) Complex encryption (digital signature) using master 
key, subkey, etc. 

55 

[0100] Not only the marking position information but 
information concerning the features of contents of the 
software stored on the optical disk and an anti-piracy 
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identifier are subjected to encryption (digital signature). 
Furthermore, two kinds of encryption keys, master key 
and sub key, are used. A specific example is described 
below in which a secret key encryption function is used 
in combination with a public key encryption function. 5 
[0101] Before proceeding to a detailed description of 
the specific example, a basic functional description of 
this system will be given first with reference to Figure 40 
to facilitate understanding of the basics thereof. 
[0102] In the example treated in the following basic 10 
description, encryption is performed using a public key 
encryption function, and encryption using a secret key 
encryption function is not treated here. Therefore, the 
master secret key for public key encryption and the sub 
secret key for public key encryption are simply referred is 
to as the master secret key and sub secret key, respec- 
tively. Likewise, the master public key for public key en- 
cryption and the sub public key for public key encryption 
are simply referred to as the master public key and sub 
public key, respectively. 20 
[0103] As shown in Figure 40, a key management 
center 9001 securely manages the master secret key to 
maintain its secrecy, and is linked to a software maker 

9002, to be described later, via a communication line 

9003. When a request for encryption is made from the 25 
software maker 9002, the key management center 9001 
receives data, to be encrypted, via a network 9003 and 
encrypts the data using the master secret key. 

[0104] For simplicity of explanation, it is assumed 
here that the software maker 9002 also includes a disk 30 
manufacturing factory. Therefore, the software maker 
9002 here is a department that performs the manufac- 
turing process at the disk manufacturing factory illustrat- 
ed in Figure 1 , in addition to the production of software. 
That is, when manufacturing optical disks of movie soft- 35 
ware, encryption for prevention of illegal duplications is 
also performed. To accomplish the encryption, the soft- 
ware maker 9002 obtains an exclusive sub secret key 
from the key management center 9001 . The above has 
described the arrangement at the optical disk maker 40 
side. 

[0105] On the other hand, there is a player 9004 at 
the user side where the optical disk is used. The player 
9004 is an apparatus for reproducing an optical disk, 
and contains a ROM in which is prestored a master pub- 45 
lie key corresponding to the master secret key main- 
tained at the key management center. A function to stop 
the reproduction of an illegally duplicated optical disk is 
also incorporated. 

[0106] Having described the general arrangement, so 
we will now describe the operation. 
[0107] (b-1) First, the processing steps for encryption 
performed at the software maker 9002 will be described. 
[0108] The encryption step first performed (the first 
encryption step) involves encryption at the stage of disk 55 
mold manufacturing, and the encrypted information is 
reflected in the shape of the disk mold. The encryption 
step performed finally (the second encryption step) con- 



is encryption performed at a stage after the forma- 
of a marking by laser trimming. 

(1-1) In the first encryption step, encryption is per- 
formed using a sub public key corresponding to the 
sub secret key to be used in the second encryption 
step, and using a software feature information and 
anti-piracy identifier. The information is transferred 
to the key management center 9001 via the com- 
munication Iine9003. The software feature informa- 
tion refers to the information describing the contents 
of the movie software written on the optical disk, and 
it is unique to each movie software and is different 
from one software to another. The anti-piracy iden- 
tifier is provided to make it possible to detect wheth- 
er the manufactured optical disk is processed with 
piracy prevention. The identifier of an optical disk 
processed with piracy prevention using second ci- 
phertext is "1"', otherwise, the identifier is "0". In this 
example, the identifier is "1 ", needless to say. 
(1-2) The key management center 9001 encrypts 
the information transferred from the software maker 
9002, by using the master secret key maintained at 
the center, and sends the encrypted information 
back to the software maker 9002. The thus created 
ciphertext is referred to as the first ciphertext. 
(1 -3) The software maker 9002 records the first ci- 
phertext on the disk mold (or master) along with the 
movie software, etc. 

(1-4) The software maker 9002 molds disks by us- 
ing the thus completed mold. 
(1 -5) Next, the software maker 9002 fabricates op- 
tical disks from the molded disks, and performs the 
laser trimming, as previously described, to form a 
marking on each optical disk. 
(1 -6) Further, the software maker 9002 detects the 
position of the marking and encrypts the obtained 
position information by using the sub secret key 
maintained at the maker. The thus encrypted infor- 
mation is referred to as the second ciphertext. Since 
it is created by encrypting the position information, 
the second ciphertext is different from one optical 
disk to another even if they are pressed from the 
same mold. This is the difference from the first ci- 
phertext. 

(1-7) Finally, the software maker 9002 records the 
second ciphertext as a barcode on the optical disk. 
The optical disk is thus completed. 

[01 09] (b-2) Next, we will describe the operation when 
the user who purchased the thus completed optical disk 
plays it back on the player 9004. 

(2-1 ) First, the player 9004 reads the first ciphertext 
recorded on the optical disk, and using the master 
public key stored in the ROM, decrypts the first ci- 
phertext which contains in encrypted form the sub 
public key corresponding to the sub secret key, the 
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software feature information, and the anti-piracy 
identifier. 

(2-2) In the meantime, the player 9004 extracted the 
software feature information from the contents of 
the movie software recorded on the optical disk. 
The extracted software feature information is com- 
pared with the software feature information ob- 
tained by decryption in (2-1); if they do not agree, 
the optical disk is judged as being an illegally dupli- 
cated one, and the subsequent reproduction oper- 
ation is stopped. If they agree, the process pro- 
ceeds to the next step. 

(2-3) It is checked whether the anti-piracy identifier 
obtained by decryption in (2-1) is "1" or "0". If it is 
"0", the reproduction operation is immediately start- 
ed, skipping the process hereinafter described. If it 
is "1 ", the process further continues. 

In this manner, if the optical disk happens to be 
a disk not processed with the piracy prevention us- 
ing the second ciphertext, the disk can be repro- 
duced on the player 9004 as long as its identifier is 
set to "0" in a legitimate way. If a pirate attempts to 
make an illegal copy by altering the identifier to "0", 
his effort will be thwarted because the identifier is 
encrypted using the master secret key after being 
combined with the software feature information, 
etc., as earlier described. 

(2-4) First, the second ciphertext recorded on the 
optical disk is read out. Then, the second ciphertext, 
which is the encrypted version of the position infor- 
mation, is decrypted using the sub public key ob- 
tained by decryption In (2-1), 
(2-5) Using the decrypted position information, it is 
checked whether the marking is actually formed in 
the position on the optical disk indicated by the po- 
sition information. Then, the actually measured 
marking position information is compared with the 
position information decrypted in (2-4). If they do not 
agree, the optical disk is judged as being an illegally 
duplicated one, and the reproduction operation is 
stopped. If they agree, the optical disk is judged as 
being a legitimate one, and the reproduction oper- 
ation is started. 

[0110] An outline of the system has been described 
above. Now, a description will be given in more specific 

[0111] As shown in Figure 32, software feature ex- 
tracting means 864 extracts the software parameters 
unique to the software, such as the TOC information 
showing the time organization of each chapter of the vid- 
eo software, image compression parameters, the title 
name, etc. from the contents of the software, and com- 
presses the extracted information to 1 28 bits to 256 bits 
by the computation of a checksum, the computation of 
a Galois field, etc., and a one-direction hash function 
864a such as SHA and MD5, to create software feature 
information 863. The software feature information 863 



is then combined with a sub public key 861 special to 
the software maker and an anti-piracy identifier 865 as 
a copyright identifier, into one data block which is then 
encrypted in steps 866a and 866b using a master secret 

5 key for public key encryption and is recorded on a mas- 
ter disk 867 in step 866e, along with the software proper. 
[0112] When a system is employed that uses secret 
key encryption in combination with public key encryp- 
tion, a master secret key for secret key encryption is 

10 used in step 866c, encryption is performed in step 866d, 
and the data is recorded on the master disk 867 in step 
866e. 

[0113] The disk mastering process is thus completed. 
The anti-piracy identifier 865 recorded on the master 

is disk defines how the copyright of the software should 
be protected, and consists of at least four bits of copy- 
right protection flags, including a flag of one bit to indi- 
cate whether the software is equipped with an anti-pira- 
cy mechanism, a flag of one bit to indicate whether it 

20 contains a low reflectivity barcode portion, a flag of one 
bit as a scramble identifier 965a to indicate whether the 
software is scrambled or not, and a flag of one bit to 
indicate whether software dubbing is prevented or not. 
Since the anti-piracy identifier 865 and the sub public 

25 key 861 are combined with the software feature infor- 
mation 863 unique to the software and are encrypted 
together by using the master secret key for public key 
encryption, it is not possible to alter them, 
[0114] The anti-piracy identifier 865 and the sub pub- 

30 He key 861 are combined with the software feature in- 
formation unique to the software, into one data block 
which is then encrypted by the secret key. 
[0115] If the software feature information 863 consists 
of 256 bits, there are 2256 possible variations. This 

35 meansthatwhensoftwarefeatureinformation isextract- 
ed from data obtained by authoring a particular movie 
software product, the probability that it coincides with 
software feature information of some other software is 
1/2256; therefore, the probability of such coincidence 

40 occurring is almost zero. When a one-direction hash 
function, such as MD5 or SHA, is used, if the hash value, 
i.e., the software feature information 963, consists of 
256 bits, finding two software contents having the same 
hash value will require 1018 years of computing time 

45 using a currently available large computer. Consequent- 
ly, it is nearly impossible to replace software. For the 
software feature information of a particular software 
product authored, only one value exists, and no other 
software can have the same value. 

so [0116] Since the software feature information is en- 
crypted jointly with the anti-piracy identifier 865 and the 
sub public key 861 , neither of these two values cannot 
be altered. Thus, after authoring, the anti-piracy identi- 
fier 865 and the sub public key 861 for a particular soft- 

55 ware product are uniquely identified. 

[0117] The recording of the anti-piracy identifier 865 
on the master disk will be described in further detail. 
[0118] How the anti-piracy identifier 865 is actually 
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appended to software is at the discretion of the copyright 
owner of the software. It takes cost and labor to apply 
an anti-piracy measure to optical disk software. Accord- 
ingly, not all optical disks are equipped with an anti-pi- 
racy mechanism; some optical disks incorporate an anti- 
piracy mechanism or the barcode of the present inven- 
tion, while others do not. If legitimate disks having no 
anti-piracy mechanism or barcode are allowed to exist, 
reproduction apparatus are required to have a function 
that enables both types of disk to be reproduced prop- 
erly. In that case, when reproducing a disk having no 
piracy protection, two possibilities must be considered: 
one is that the disk is a legitimate disk for which the soft- 
ware company has unlocked the piracy protection in a 
legitimate way, and the other is that the disk is a disk 
which the software company has produced with piracy 
protection but whose anti-piracy identifier has been ille- 
gally altered by a pirate. 

[0119] Means for identifying whether the anti-piracy 
identifier is legitimate or not is therefore important. 
[0120] In the present invention, the anti-piracy identi- 
fier 865, including the anti-piracy identifier, is encrypted 
together with the software feature information by using 
a secret key, and recorded in a ciphertext recording sec- 
tion on the master disk. The reproduction apparatus de- 
crypts the ciphertext with a prescribed public key. This 
prevents illegal alterations from being made to either da- 
ta. 

[0121] The only way left to pirates is to replace the 
whole portion of the first ciphertext, which contains the 
software feature information 863 and the anti-piracy 
identifier 865, by different one. 
[0122] To distinguish the software feature information 
863 from the software feature information extracted 
from the movie software actually written on the optical 
disk, which will be described later, theformer may some- 
times be referred to as the first software feature infor- 
mation, and the latter as the second software feature 
information. Both kinds of information are the same in 
that they relate to the contents of the same movie soft- 
ware, but different in thattheformer is written in encrypt- 
ed form at the time the optical disk is manufactured, 
while the latter is extracted by examining the contents 
of the actually recorded movie software at the time of 
reproduction. 

[0123] Since the first software information 863 has a 
value unique to the software for which the authoring is 
completed, the probability of some other software yield- 
ing the same value is 1/2256, which is approximately 
zero, as earlier noted. If the first software information 
863 is replaced, the information no longer agrees with 
thesecond software feature information 885 actually ex- 
tracted from the disk in step 876e in the process of the 
check routine of Figure 38 performed in steps 876a, 
876c, 876e, and 876f. This prevents the disk with altered 
information from being played back. In this way, the anti- 
piracy identifier 865 of the software and the sub public 
key hereinafter described are protected against illegal 



alterations. An illegal manufacturer, who is thinking of 
making illegal disks by copying the software from a le- 
gitimate disk, may therefore consider making disks that 
do not have either the anti-piracy identifier or the bar- 

5 code. In that case, the anti-piracy identifier in the anti- 
piracy identifier 865 would have to be changed from ON 
("1 ") to OFF ("0") setting. To change the setting, howev- 
er, it is necessary to have the key management center 
issue the first ciphertext encrypted with the master se- 

10 cret key shown at step 866a in Figure 36, but normally, 
measures are in effect to prevent the key management 
center from issuing it to an unauthorized person, thus 
preventing illegal alteration of the anti-piracy identifier 
865 

is [0124] That is, the first software feature information 
863 and the anti-piracy identifier 865 are encrypted to- 
gether into the first ciphertext 886 for recording on the 
master disk. This has the effect of thwarting any attempt 
by a pirate to make illegal copies of piracy-protected 

20 software in the disk format of no piracy prevention with- 
out an anti-piracy mark or mechanism. With this method 
that constitutes one aspect of the invention, if a disk 
standard is worked out, allowing the existence of disks 
without piracy protection along with disks with piracy 

25 protection, and if the standard is replaced by a new-gen- 
eration standard, reproduction apparatus of the new 
generation can achieve piracy prevention against all 
disks. This is a big practical advantage. Furthermore, in 
the above embodiment, as examples of the copyright 

30 protection flag (identifier), examples have been de- 
scribed wherein the anti-piracy identifier 865, etc, which 
indicates whether softwar e contents are piracy-prevent- 
ed software or not, is used. Besides the above embod- 
iment, by using an anti-copying identifierwhich indicates 

35 whether software contents are copying-prevented soft- 
ware or not, the disk having the copying-prevented soft- 
ware is protected from being sold on the condition of the 
cancelling the anti-copying identifier. 
[0125] The necessity of the master secret key and sub 

40 secret key in secret key of a public key encryption and 
the construction and functions of these secret keys will 
be described in detail below. 

[0126] In the piracy prevention method of the inven- 
tion, the secret encryption key need not be delivered to 

45 the disk manufacturing factory since secondary record- 
ing can be done. However, it is not realistic to have an 
encryption center create ciphertext for each of the disks 
manufactured throughout the world and to receive the 
ciphertext via a network, because this would cause an 

so enormous increase in communication traffic. On the oth- 
er hand, distributing the secret key to each software 
maker and disk manufacturing factory is not possible 
from the viewpoint of security. A method that can over- 
come this problem is therefore needed. 

55 [0127] As a method to overcome this problem, the 
present invention provides the master key/subkey sys- 
tem. According to the present invention, the key man- 
agement center (key issuing center) keeps the master 
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secret key which is not disclosed to the outside. On the 
other hand, the software company keeps the sub secret 
key with which the company maintains the security of 
its software on its own responsibility. As already de- 
scribed with reference to Figure 32, the software feature 
information and the sub public key the software compa- 
ny keeps are jointly encrypted, using the master secret 
key, into the first ciphertext. The reproduction apparatus 
decrypts the first ciphertext by applying the master pub- 
lic key, and extract the sub public key from the decrypted 
text. This prevents illegal alterations from being made 
to the sub public key that becomes necessary to decrypt 
the second ciphertext, i.e., the encrypted version of the 
marking position information. 
[0128] This means that a particular software product 
can only be encrypted using a particular secret key, that 
is, the software maker's secret key corresponding to the 
sub public key. Using the sub secret key, the software 
maker can set the key on software locked or unlocked 
at their option. 

[0129] This in turn means that pirates cannot produce 
pirated disks unless they steal the sub secret key infor- 
mation unique to the software from the software maker. 
[0130] In Figure 32, the software maker combines 
disk physical position information 868 and disk ID 869, 
and encrypts them together by using the sub secret key 
876 in step 866f to construct a public key cipher 859 
which is recorded on the optical disk 800 in the form of 
a barcode. This permits the software maker to produce 
piracy-protected disks without having to have the mas- 
ter secret key 866a. The effect of this is to protect the 
security of the master secret key. If the sub secret key 
is stolen and pirated disks are produced, the damage is 
limited to the software for which that sub secret key was 
issued. When the software maker issues a new sub se- 
cret key and sub public key production of pirated disks 
of the software thereafter can be prevented. Figures 36 
and 37 are general system diagrams showing data flow. 
[0131] In operation, Figure 36 is the same as Figure 
32, and detailed explanation will not be given here. In 
Figure 36, the software company 871 a first sets its own 
sub secret key 876, and computes the sub public key 
861 . The sub public key 861 is combined with the soft- 
ware feature information 861 of the software to be re- 
corded, and transmitted to the key issuing center 872 
via a network such as the Internet. The key issuing cent- 
er 872 encrypts the combined signal with the master se- 
cret key 866a and sends back the encrypted master 
public key 858 to the software company. The software 
company combines it with the software, and sends the 
combined signal to the disk manufacturing factory 873 
where it is recorded on the master disk 867 from which 
the disk 800 is produced. Referring next to Figure 37, 
the software company 871 b forms a marking on the disk 
800, reads the marking position information, encrypts 
the position information with the sub secret key 876 cor- 
responding to the sub public key, and, using a pulsed 
laser 813, records the encrypted information on the disk 
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800b in the form of a barcode. A detailed description of 
the recording operation has already be given and will 
not be repeated here. 

[0132] Next, the anti-piracy operation in the reproduc- 
5 tion apparatus, when reproducing the thus completed 
optical disk, will be described in further detail with refer- 
ence to Figure 38. 

[0133] The operation consists essentially of a soft- 
ware check step 874 and a disk check step 875. In the 
software check step 874, first the first ciphertext is re- 
produce from the disk 800 in step 876a, and then, using 
the master public key stored in the ROM in the repro- 
duction apparatus in step 876c, the first ciphertext is de- 
crypted into plaintext in step 876b. In step 876d, the 
plaintext of the first software feature information 863 and 
sub public key 861 is obtained, and in step 876f, it is 
checked against the second software feature informa- 
tion extracted using the one-direction hash function. If 
the check is NG in step 876g, the operation is stopped; 
if the check is OK, the sub public key is output in step 
876h. If alterations have been made to the sub public 
key or software attributes by a pirate, the two kinds of 
information do not agree, so that the reproduction of an 
illegal disk is prevented. The legitimate sub public key 
is thus obtained at the reproduction apparatus. 
[0134] In the disk check step 875, the sub public key 
is input instep 876k, and the second ciphertext, i.e., the 
public key cipher 859 (see Figure 32), is reproduce in 
step 876m. In step 876n, the second ciphertext is de- 
crypted into plaintext by using the sub public key, and 
in step 876p, the marking position information is ob- 
tained. In this case, the marking position information 
cannot be altered illegally unless the sub secret key B76 
(see Figure 32) corresponding to the sub public key is 
leaked out. In step 876p, the actual position of the mark- 
ing formed on the disk by laser is read, and in step 876r, 
this position is checked. If the result is NO in step 876s, 
the operation is stopped in step 876t, producing a dis- 
play "Pirated Disk". If the result is YES, the reproduction 
operation is allowed to continue in step 876u. 
[0135] With the above construction, illegally duplicat- 
ed disks cannot be reproduced on the reproduction ap- 
paratus unless the sub secret key maintained at the soft- 
ware maker is stolen or unless the nonreflective marking 
portion is laser-trimmed with an accuracy of submi- 
crons, for example, 0.13 u, m, and two disks are lami- 
nated together with an accuracy of the order of a few 
microns. This makes it virtually impossible to make pi- 
rated disks. This has the effect of preventing pirating of 
disks. 

(c) Detailed description of an example using a public key 
encryption function in combination with a secret key 
encryption function 

[0136] A first feature of the encryption system of the 
present invention is the use of two encryption functions, 
a public key encryption function and a secret key en- 
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cryption function, when encrypting marking position in- 
formation, etc. on each optical disk. 
[0137] The following description deals with problems 
encountered when actually implementing a piracy pre- 
vention method that uses public key cipher, and also 
deals with a method of implementation. The public key 
cipher here refers to the position information encrypted 
using a public key encryption function (for example, an 
RSA function). 

[0138] From the security point of view, it is desirable 
that all reproduction apparatus be equipped with a pub- 
lic key cipher decoder to decode the anti-piracy public 
key cipher of the present invention. However, process- 
ing a 51 2-bit public key cipher requires 0.3 seconds us- 
ing a 32-bit; 50-MHz CPU. On the other hand, the DVD 
player control IC predominant in consumer apparatus 
today is an 8-bit one-chip microcomputer. With this 
CPU, it will take more than a few minutes to process the 
public key. This means that the user has to wait a few 
minutes before an image is reproduced from a DVD. 
This poses a problem in employing the public key cipher 
system in consumer products. 
[0139] Since, at the present level, public key cipher 
cannot be processed by the CPU used in consumer 
products, for the present there is no option but to use a 
secret key cipher decoder for consumer reproduction 
apparatus because it requires a small amount of 
processing time, However, in the case of secret key ci- 
pher, since the secret encryption key can be easily de- 
ciphered from cipher decoder information, the secret 
key cipher will lose its anti-piracy effect once deci- 
phered. Therefore, transferring to public key cipher 
which is difficult to decipher is imperative in the future. 
[0140] Secret key cipher and public key cipher are 
mutually incompatible. If the system were simply 
switched from secret key cipher to public key cipher in 
future, second-generation optical disks having public 
key cipher would not be able to be decoded and repro- 
duced on a first-generation player having a secret key 
cipher decoder. Furthermore, first-generation optical 
disks having secret key cipher would be unable to be 
reproduced on a future player. If the player is construct- 
ed to allow the reproduction of such disks, it will allow 
pirates to decipher the secret key for the secret key ci- 
pher and create the secret key cipher using the deci- 
phered key, thus giving rise to the possibility of pirated 
disks being marketed in large quantities. If disks en- 
crypted with secret key are allowed to be reproduced on 
future players, piracy cannot be prevented even if public 
key cipher is used. 

[0141] The need therefore arises for a mechanism 
which, if the cipher decoder of reproduction apparatus 
is changed from the secret key to the public key system 
in the future, can preserve compatibility to allow earlier 
optical disks to be reproduced properly on reproduction 
apparatus having a new public key cipher decoder while 
preventing the reproducing of pirated disks. 
[0142] A method of the invention that satisfies the 



needforcompatibility is disclosed hereinafter. As shown 
in Figure 39, the optical disk of the invention has both a 
secret key cipher recording portion 879 and a public key 
ciphertext recording portion 880. The manufacturing 

5 method will be described later with reference to Figure 
29. First, when reproducing the optical disk of Figure 39 
on a first-generation reproduction apparatus equipped 
with a secret key cipher decoder 881 , the first physical 
feature information (corresponding to the encrypted ver- 

10 sion of the position information) unique to the legitimate 
disk is read from the secret key cipher recording portion 
879 on the disk, and decrypted by the secret key cipher 
decoder 881 into plaintext. Further, the second physical 
feature information (corresponding to the measured po- 

is sition information) of the disk is measured, and the two 
kinds of physical information are compared. 
[0143] In the case of a legitimate disk, the disk is nor- 
mally reproduced since the two kinds of physical feature 
information agree, as shown in step 878a. 

20 [0144] In the case of a pirated disk, since they do not 
agree as shown in step 878c, the reproduction of the 
disk is prevented. That is, the reproduction is prevented 
as long as the secret key cipher remains unbroken. If it 
is broken some time in the future by a pirate, as earlier 

25 described, the pirate can produce illegal disks in large 
quantities by illegally creating the secret key cipher. 
[0145] In that case, since the secret key decoder 881 
in the first-generation reproduction apparatus checks 
only the secret key cipher, the comparison checks OK 

30 as shown in step 878d, allowing the illegal pirated disk 
to be reproduced. However, by that time in the future, 
second-generation reproduction apparatus having a 
public key cipher decoder 8B2 will have become a pre- 
dominant type; therefore, reproducing pirated disks on 

35 the first-generation reproduction apparatus in an illegal 
manner will not have a significant impact. 
[0146] Since the legitimate disk of the invention has 
public key cipher, the disk is normally reproduced on the 
second-generation reproduction apparatus, as shown in 

40 step 878b. On the other hand, when a pirated disk is 
inserted for reproduction, the reproduction apparatus 
checks only the public key cipher, as shown in step 
878e, whether the secret key cipher is deciphered or 
not. As a result, the anti-piracy function of the public key 

45 cipher works, as shown in step 878e, so that the repro- 
ducing of the pirated disk on the second-generation re- 
production apparatus is almost perfectly prevented. 
[0147] According to the invention, all disks are man- 
ufactured with both the secret key cipher 879 and public 

so key cipher 880 prewritten thereon from the time of com- 
mercial introduction of the first-generation reproduction 
apparatus. Therefore, in the first stage, piracy preven- 
tion at the secret key cipher level is provided since the 
ciphertext can be processed by the 8-bit microcomputer 

55 mounted in the first-generation reproduction apparatus. 
In the second stage, that is, in the future when the secret 
key cipher may have be broken, more sophisticated pi- 
racy prevention can be provided by the public key cipher 
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decoder incorporated in the second-generation appara- 
tus which will have become the predominant type by that 
time. In this way, if one generation is replaced by the 
next generation, perfect compatibility with earlier media 
can be preserved uninterruptedly with the second-gen- 5 
eration reproduction apparatus achieving nearly perfect 
piracy prevention. 

[0148] The above has described an example of appli- 
cation to the low reflectivity marking method, that is, the 
piracy prevention method at the reflective layer level, 10 
but it will be appreciated that the effect of preserving 
compatibility at the time of generation change can also 
be obtained if the same is applied to the piracy preven- 
tion method at the master disk level that uses the phys- 
ical feature information of the master disk as shown in is 
Figure 13. 

[0149] The above-illustrated example has the feature 
that, when performing encryption, the same information 
is encrypted by using a public key encryption function 
and a secret key encryption function separately, and the 20 
respectively encrypted versions of the information are 
recorded on the disk. 

[0150] Accordingly, when a transition is made in future 
from the current player equipped with a decoder, based 
on an 8-bit microcomputer, for decoding the ciphertext 25 
created using a secret key encryption function to the fu- 
ture player equipped with a decoder, based on a 32-bit 
microcomputer, for decoding the ciphertext created us- 
ing a public key encryption function, the optical disk as 
described in the above example can be used effectively 30 
on either type of player. 

(B) Other mechanisms will be described. 

[0151] (a) We will describe another specific example 35 
of the public key/secret key combination type in which 
the software feature information, ID number, and mark- 
ing position information are encrypted (see Figure 29). 
The ID number refers to the number assigned to each 
diskfor identifying the disk. The disk ID (also called the 40 
disk ID number) to be described later is the same in 
meaning to the ID number. Major differences between 
the present example and the foregoing specific example 
(see Figures 32, 36, and 37) are: (1) In the foregoing 
specific example, the software feature information is 45 
written on the master disk as the first ciphertext and the 
marking position information is written on a pressed disk 
as the second ciphertext, while in the present example, 
the software feature information, the ID number, and the 
marking position information are all combined together so 
for encryption and the encrypted text is written on an 
already pressed disk; (2) In the foregoing example, two- 
stage encryption is performed using the master secret 
key and sub secret key, while in the present example, 
encryption is performed only with master secret key 55 
without using a key corresponding to the sub secret key. 
[0152] More specifically, as shown in Figure 29, the 
above combined signal is encoded in a secret key en- 



cryption section 832 by using a secret key 834 for secret 
key encryption. The same combined signal is also en- 
coded in a public key encryption section 831 by using a 
secret key 833 for public key encryption. In this way, 
public key cipher is used in conjunction with secret key 
cipher. This overcomes the problem that the current re- 
production apparatus can only decode the secret key 
cipher because of the slow processing speed of its mi- 
crocomputer. Future reproduction apparatus will use a 
higher-speed microcomputer, for example, of 32-bit 
configuration and performs a piracy check by decoding 
only the public key cipher having a higher degree of se- 
curity; therefore, piracy can be prevented almost per- 
fectly. If the secret key cipher is broken some time in the 
future, since the public key-type player will be the pre- 
dominant type by that time, substantial prevention of pi- 
racy can be accomplished. By recording the public key 
cipher simultaneously with the secret key cipher on the 
media, if a transition occurs from the current generation 
to the next-generation player, the media can be repro- 
duced on reproduction apparatus of old generation 
while substantially achieving piracy prevention. 
[0153] (b) Next, a modulation recording method for 
barcode will be described in detail with reference to the 
same figure. 

[0154] In Figure 29, a barcode recording apparatus 
(PWM recording apparatus) 845 is used to write the en- 
crypted information onto the disk. 
[0155] First, information concerning the position of the 
nonreflective portion 815 formed on the reflective layer 
802 or on the second reflective layer 825 is detected 
using optical mark position detecting means 600, The 
method of detection has already been described with 
reference to Figure 15, etc., and therefore, explanation 
will not be repeated here. The optical mark position in- 
formation, the software feature information and the ID 
number generated by ID generator 546 are combined 
by combining means 830. The software feature informa- 
tion is obtained by feature-extracting from a part of the 
software contents using a one-direction hash function 
such as SHA, and by obtaining a hash value of 128 bits 
or 160 bits. The ID number generator 546 has already 
been described with reference to Figure 14, and there- 
fore, explanation will not be repeated here. In the en- 
cryption section 830, the combined signal of the physical 
feature information is encoded in the public key encryp- 
tion section 831 , such as PSA, by using the secret key 
833 for public key encryption. 
[0156] The above public key cipher and the secret key 
cipher are combined in a combining section 835, and 
are affected with interleaved/Reed-Solomon error cor- 
rections by a Reed-Solomon encoder 838 and an inter- 
leaver 839 in an error-correcting encoder 837 of a re- 
cording circuit 836. The interleave length in this case is 
so set as to be able to correct a burst error due to a disk 
scratch 2.38 mm or longer, the same level as the CD, 
thereby resulting such effect to provide error correction 
of errors in the barcode recorded data of the invention 
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against a disk scratch that may be caused in the worst 
condition in consumer use. 

[0157] The principle of the pulse width modulation 
method will be described with reference to the same fig- 
ure. This method eliminates the need for the first cipher- 5 
text by the master secret key and the second ciphertext 
by the sub secret key. In this method, the software fea- 
ture information, the position information, and the ID 
number are combined together for encryption. Billions 
of ROM disks are produced annually. Therefore, there 10 
is a possibility that a disk that happens to have a marking 
whose position pattern is very easy to duplicate may be 
produced. A pirated disk could be produced by using a 
combination of this easily duplicatable marking position 
information and the legitimate ciphertext of this position 1$ 
information. In Figure 29, the position information is 
combined with the software feature information for en- 
cryption or for authentication by signature. The position 
information is therefore inseparable from the software 
feature information. This means that if an easily dupli- 20 
eatable mark happens to be produced, it is only possible 
to produce pirated disks having corresponding software 
contents, so that potential damage will be greatly limit- 
ed. It will be recognized here that this ciphertext may be 
recorded on the master disk. 25 
[0158] The error-correction coded signal is modulated 
into a PWM signal by a pulse interval modulator 840. 
When describing lines by using a laser, it is difficult to 
construct a barcode by accurately controlling the line 
width, Therefore, in the present invention, the pulse in- 30 
terval is classified into four values 1T, 2T, 3T, and4T, as 
shown in Figure 30, and by encoding marks 843b, 843c, 
843d, and 843e as 00, 01,10, and 11 , for example, 2-bit 
data can be transmitted with one barcode. As shown in 
a table 842 showing the relationship between line width 35 
and recording rate in Figure 30, when recording a PIM 
barcode in a lead-in area of the ROM disk 800 with line 
width 10 |xm, it can be seen that 5.6 kbits of information 
can be written additionally on the completed disk in one 
revolution. 40 
[0159] Part (1) of Figure 31 shows a nonreflective por- 
tion detection signal. 

[0160] The signals have a synchronizing signal area 
858, consisting of three pulses 857a, 857b, and 857c 
with interval T; this area indicates the starting position. 45 
This is followed by a blank of 4T which is a reference 
time area for measuring reference time T. When the line 
width is 10|xm,T = 20|im. Next comes a first recording 
area 860 of about 1 kbits for holding secondaryrecord- 
ed data. Then, preceded by a blank 861 a of 1 00 u. m or so 
greater length, there is recorded a second recording ar- 
ea 862a for tertiary-recorded data. A password for de- 
scrambling, etc. are recorded at a dealer. 
[0161] (c) The following describes the method of use 
of the barcode which can secondary" and tertiaryrecord 55 
by the HMST method. 

[0162] As shown in Figure 35, in process (2), thesoft- 
ware maker may produce a disk 844b on which the ID 



number unique to the disk and a private key used for 
secret communication with a user are recorded. The 
disk 844c, 844d can be reproduced without requiring 
any special procedure. 

[0163] As shown in Figure 21 to be described later, a 
recording/reproduction circuit implementing the HMST 
method of the invention can be constructed by replacing 
an MFM modulation/demodulation magnetic head in a 
magnetic recording/reproduction circuit by a PWM 
(PIM) modulation/demodulation laser. 
[0164] (d) Another specific example of disk manufac- 
turing is shown in Figure 35. That is, in process (3) of 
Figure 35, which shows another application of the disk, 
information of scrambled MPEG video signal or the like 
is recorded on a disk 844e. A brief operational descrip- 
tion of MPEG scrambling will be given below. An MPEG 
compressed video signal is split between a variable- 
length encoder for AC components and a fixed-length 
encoder, each containing a random number adder, for 
scrambling. In the present invention, a descrambling 
signal is encrypted by an encryption encoder using a 
one-direction function. Further, a portion of a compres- 
sion program in an image compression controller is 
compressed by the encryption encoder. This makes it 
difficult for a replicating company to exchange the en- 
cryption encoder with an illegal one. Accordingly, only 
legitimate disks are decrypted with sub public key, 
[0165] Referring back to Figure 35, we will describe 
next how the disk 844e manufactured in the above proc- 
ess (3) is processed in the next process (4) and later 
processes. 

[0166] That is, in process (4) of Figure 35, using a 
master secret key the software company encrypts the 
disk ID number and a sub public key for decoding the 
descrambling signal, and secondary-records the en- 
crypted text by barcude on the disk, thus completing the 
disk B44f. Since the disk 844f are scrambled, the disk 
cannot be reproduced as is. The disk ID number men- 
tioned here is the same in meaning as the previously 
described ID number. In process (5), after receiving 
money for the disk from a customer, the dealer gener- 
ates a password by using the disk ID number with the 
sub secret key corresponding to the sub public key, and 
tertiary-records the password on the disk. Once the 
password has been recorded, the disk 844g can be re- 
produced on a reproduction apparatus by descrambling 
the data. In the case of a computer program, the pro- 
gram can be installed. With this method, if someone 
shoplifts a disk, images or software on the disk cannot 
be reproduced since image scrambling and ciphertext 
are not unlocked. This defeats the effort of a shoplifter, 
and thus has the effect of preventing shoplifting. 
[0167] (e) We interrupt here our explanation relating 
to Figure 35, and refer back to Figure 21 to describe the 
operation and configuration of a reproduction apparatus 
incorporating a recording circuit, as shown, concentrat- 
ing on magnetic recording and reproduction circuits 
which in combination of an optical reproduction appara- 
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tus constitute a recording/reproduction circuit. In Figure 
21 , a combination of the magnetic recording and repro- 
duction circuits, and optical reproduction apparatus is 
shown, but instead, a combination of an ordinary optical 
reproduction apparatus and a floppy disk drive may be 

[0168] In the figure, the magnetic reproduction circuit 
has two demodulators, an MFM demodulator30d and a 
second demodulator 6b2(sic) which is another type to 
MFM, one or the other of which is selected by a selector 
661 . The corresponding modulator is kept only at the 
factory, so that a full recording capability is not provided 
although reproduction is possible. Accordingly, when a 
specially modulated area was recorded at the factory, a 
specially modulated signal is not recorded. CPU 665 on 
the drive side performs control so that no recording can 
be made unless the specially modulated signal is repro- 
duced from this area. Therefore, it can be said that this 
area is a logical write-once area, permitting recording 
only once. Accordingly, once the machine ID. such as a 
drive ID 699a recorded in a ROM 699 in the reproduction 
apparatus, has been recorded in this write-once area of 
a magnetic recording portion on an optical disk or a flop- 
py disk, the user drive cannot alter the recorded con- 
tents, thus preventing illegal installation on more ma- 
chines than a permitted number of machines. The drive 
ID mentioned here is a number assigned to each repro- 
duction apparatus for identifying the apparatus. The ma- 
chine ID may be an ID assigned to a personal computer. 
A network interface section 14 examines an HDD, etc. 
on a second personal computer 663 connected to a net- 
work 664 and supervises the operation so that the pro- 
gram of the same drive ID or same machine ID will not 
be started or run , thus preventing the use of illegally cop- 
ied software. 

[0169] The laser marking recording method of the in- 
vention permits secondary recording such as recording 
of a dealer code at a dealer, as does a magnetic method. 
This, however, does not constitute a feature of the 
present invention, and therefore, detailed explanation 
will not be given here, 

[01 70] I n the case of a rental video store, if a password 
were recorded permanently on a disk, and if the disk 
were shoplifted, the shoplifter could play back that disk. 
To prevent this, a rental video store hands a scrambled 
disk 844j to a customer, as shown in process (6). In step 
851 g, a password for descrambling is computed from 
the disk ID or the drive ID described later by using a sub 
secret key. In step 851 j, the password is printed on the 
receipt which is handed to the customer. The password 
may be notified to the customer by telephone, as shown 
in step 851 u. 

[0171] The customer performs the descrambling op- 
eration shown in step 851 r on his reproduction appara- 
tus in his home. First, in step 851s, the scramble iden- 
tifier and the software feature information are decrypted 
from the ciphertext by using the sub public key. The de- 
crypted software feature information is compared with 
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the software feature information that was actually ex- 
tracted from the software contents by using a one-direc- 
tion hash function, to verify whether they agree or not. 
If verification cannot be done, the disk is regarded as an 

5 illegal one, and the reproduction is stopped. If the 
scramble identifier is OFF in step 851 x, the reproduction 
operation is permitted in step 851 p. If the scramble iden- 
tifier is ON, the user enters a password from a numeric 
keypad in step 851 k, and the password is computed us- 

10 ing the sub public key. In step 851 1, a further computa- 
tion is performed using the disk ID and/or drive ID, and 
only when the result of the password computation 
agrees with the disk ID or drive ID, the scramble or ci- 
phertext is unlocked to permit reproduction or operation 

's for a prescribed number of days. When the disk has 
been rented out with a password only for a portion of the 
software to the customer, if the customer desires to view 
other items in the software, the customer can request 
by telephone the key issuing center to issue the pass- 

20 word for the desired software item; the password is then 
notified to the customer in step 851 u and input in step 
851 k to enable the desired software on the disk to be 
reproduced. 

[0172] The operation performed at the video retail 

25 store or rental video store in processes (5) and (6) in 
Figure 35 will be described in further detail with refer- 
ence to Figure 34. The video retail store receives a 
scramble- or encryption-applied disk 844f, and after 
confirming payment from the user, transmits the disk ID 

so number and sub public key data of the disk 844f from a 
barcode recording/reproduction apparatus 845 to a 
password issuing center 852 via a POS terminal 846. In 
the case of a small shop system, the password issuing 
center, that is, the system containing the sub secret key 

35 for the sub public key, may be contained in the POS ter- 
minal. The password issuing center inputs the disk ID 
number and time information in step 851 q, performs 
computation in step 851s, performs encryption with the 
sub secret key in step 851t, and issues a password in 

40 step 851 g. The password is then transmitted via a net- 
work 848 and the POS terminal 846 to the barcode re- 
cording apparatus 845, and the disk 844g with the pass- 
word recorded thereon is handed to the customer. This 
disk 844g can be reproduced as is. 

45 [0173] Next, the operation performed at the rental 
store will be described in detail. First, a ROM disk 844f 
locked with scrambling is displayed on the store shelf. 
When the particular ROM disk 844f is specified by a cus- 
tomer, a shop clerk holds in his or her hand a circular 

so barcode reader 850 with a built-in rotary-type optical 
head 853 generating a spiral scanning pattern, and 
presses it onto the center of the disk 800 housed in a 
transparent case, to read the barcode formed by nonre- 
flective portions 815 on the reflective layer in the disk 

55 844f, thereby reading the disk ID number. The product 
code may be read either from the barcode of the inven- 
tion formed by the nonreflective portions 815 or from the 
circular barcode prerecorded and pressed by the exist- 
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ing recording method on an inner ring portion inside the 
pit recording area of the master disk. These items of in- 
formation are processed by the POS terminal 846, and 
the rental charge is settled; at the same time, the pass- 
word corresponding to the disk ID number is issued in 
step 851 g, as previously described. For rental purposes, 
to limit the number of days for viewing, time information, 
as used in step 851 r, is appended to the disk ID number 
for encryption, and the password is thus created. This 
password is valid for a preset number of days, the effect 
being that in the case of a rental disk a rental period of 
3 days, for example, can be set in the password. 
[0174] In step 851 i, the thus issued password for un- 
locking the scramble, the date of rent, the expected data 
of return, and the rental charge of the title are printed on 
a receipt 849 which is handed to the customer together 
with the disk. The customer takes the disk 844j and re- 
ceipt 849 home. When, in step 851k, the password is 
input from an input section 854, such as a numeric key- 
pad, on the information processing apparatus 676 
shown in Figure 25, the password is computed with the 
disk ID number and is input to a master cipher decoder 
534 where the encrypted data is decoded into plaintext 
by using a public key. This plaintext is checked in a plain- 
text data checking section 715 to determine whether it 
satisfies a predetermined condition; only when thepass- 
word is correct, program data is descrambled by a sub 
cipher decoder 718, and the video image is output. 
[0175] In this case, if the password contains time in- 
formation, date data from a clock section 855 is 
checked, and descrambling is allowed as long as the 
date data matches the time information, The password 
and its corresponding ID number are stored in a nonvol- 
atile memory 755a in a memory 755. Once the password 
has been entered, the user need not reenter it to perform 
descrambling. In this way, the key on a disk can be 
locked and unlocked by electronic means, which offers 
an advantage for distribution business. 
[0176] The foregoing embodiments have been de- 
scribed referring mainly to the disk ID method wherein 
a disk ID is appended to a disk. However, in the case of 
disks that do not have disk IDs, it becomes necessary 
to use the drive ID of the drive. The following description 
deals in detail with the descrambling, password crea- 
tion, and checking operations when the drive ID alone 
is used and also when both the drive ID and disk ID are 
used. 

[0177] In Figure 35, when using a password relating 
to the drive ID for descrambling the software, the drive 
ID 699a stored in a ROM in the reproduction apparatus 
is transmitted from a signal section 851 z in Figure 34 to 
the password issuing center by telephone or via person- 
al computer communication. In the password issuing 
center, using the drive ID and the software ID in step 
851 q, computation is performed in step 851s, and the 
result is encrypted with sub secret key in step 851 1, 
thereby creating a password in step 851 g. In step 851 u, 
the password is transmitted to the communication sec- 
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tion 85z(sic) in the reproduction apparatus including the 
user's personal computer, by telephone or via personal 
computer communication. The user enters the pass- 
word in step 851k, and decryption computation is per- 

5 formed using the sub public key in step 851m. In step 
851 1, the drive ID is compared with the result of the com- 
putation, and if they do not match, the operation is 
stopped. If they match, reproduction or operation is per- 
formed in step 851 p. 

10 [017B] The advantages and disadvantages of the 
drive ID method and the disk ID method will be de- 
scribed. When the disk ID is used, the password is valid 
only for one particular disk. The disk can be run on any 
drive. This method is therefore suitable for movie soft- 
's ware and the like. However, in the case of business soft- 
ware for personal computers, if the software can be in- 
stalled on any drive, the software on the disk may be 
illegally copied onto more than one computer. 
[0179] That the disk can be run only on one drive is a 

20 disadvantage of the drive ID method in the case of movie 
software. This, however, becomes an advantage in the 
case of personal computer software. For business soft- 
ware that need only be installed once, the drive ID meth- 
od has an advantage in that its password-protect un- 

25 locking feature prevents the software from being illegally 
installed on a personal computer by using other drives 
than the one designated drive, 
[0180] However, the drive ID is written in an EPROM 
in the machine, and can be easily altered. If drives of 

30 the same drive ID are sold, illegal installation may be 
made on many machines. On the other hand, as already 
described, it is difficult to alter the disk ID of the present 
invention. In Figure 34, if provisions are made to create 
a password for both disk ID and drive ID in step 851 q 

35 and to check both IDs in step 851t, the disk ID is pre- 
vented from being altered. The resulting effect is that if 
drives of the same drive ID are distributed in large quan- 
tities, since the disk ID is valid only for one particular 
disk, illegal installation on many machines is sup- 

40 pressed. 

[0181] As described above, the drive ID method and 
the disk ID method have their own advantages and dis- 
advantages, and the advantages are different for differ- 
ent applications. It is expected that the drive ID method 

45 will be used for computer software that is installed only 
once, and the disk ID method for movie or music soft- 
ware that is reproduced many times. This requires that 
the reproduction apparatus be designed to support both 
methods. Using the flowchart of Figure 42, we will de- 

so scribe an operational procedure that handles both the 
drive ID and disk ID. When installation is started, first 
the scramble identifier is checked in step 901 a whether 
it is ON or not. If the software is scrambled and the iden- 
tifier is OFF, this means an illegal operation, and the in- 

55 stallation stops. The installation also stops if the identi- 
fier is ON though the software is not scrambled. As al- 
ready described, this scramble identifier cannot be al- 
tered and is therefore effective in preventing illegal in- 
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stallation. In step 901c, the personal computer is con- 
nected to the password issuing center via a network. In 
step 901 d, user ID is entered, and in step 901 e, if the 
reproduction apparatus has a drive ID, the drive ID is 
transmitted to the password issuing center. After con- 
firming payment, the password issuing center performs 
encryption and computation on the drive ID and soft- 
ware ID by using a sub secret encryption key, to gener- 
ate a password. The personal computer at the user end 
performs computation to decrypt the password by using 
a sub public key, and compares it with the machine ID 
of the personal computer or the drive ID of the drive. If 
they do not match, the operation stops; if they match, 
the installation program is run in step 901 n. In the above 
case, that is, when computing the password with the 
drive ID in step 901 k, a program decryption key may be 
output to accomplish decryption or descrambling. 
[0182] Turning back to step 901e, if there is no drive 
ID, then it is checked in step 901 h whether a disk ID is 
recorded on the disk, and if there is no disk ID. the in- 
stallation stops. If a disk ID is recorded, the disk ID and 
the software ID are transmitted to the password issuing 
center. The password issuing center communicates with 
a credit company, and after confirming online payment 
by credit, creates a password in step 901 j from the disk 
ID and software ID by using the sub secret key. The per- 
sonal computer at the user end decrypts the password 
by using the sub public key in step 901 m, and if the result 
checks OK, program installation or software reproduc- 
tion is carried out, 

[0183] In this way, both the drive ID and disk ID can 
be handled. This has the effect of preventing illegal in- 
stallation while allowing legitimate installation of soft- 
ware products having various IDs. 
[0184] Thus by encrypting the disk physical ID by a 
one-direction encryption encoder, copy protection secu- 
rity can be enhanced. 

[0185] As described above, according to the present 
embodiment, a nonreflective portion is formed on a re- 
flective layer in an optical disk consisting of two disks 
laminated together, and at least its position information 
is encrypted and written on the same optical disk. This 
makes duplication much more difficult as compared to 
the prior art. Production of illegal copies, that is, so- 
called pirated disks, can thus be made virtually impos- 
sible. 

[0186] As is apparent from the description so far giv- 
en, the present invention has the advantage of achiev- 
ing a greatly improved copy prevention capability as 
compared to the prior art. 

[0187] Furthermore, according to the present inven- 
tion, a piracy check mechanism can be incorporated into 
the master disk by encrypting formatted master disk 
physical feature information 876 in combination with 
public key data and software feature information, as de- 
scribed with reference to Figure 32, etc. This further in- 
creases security. 

[0188] In Figure 26, a method was disclosed that pro- 
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vides greater network security for online shopping com- 
panies. According to this method, the online shopping 
company secondary-records the private key for secret 
communication on all disks and distributes it to users, 

5 eliminating the need for sending the private key to the 
user by mail and also saving the user the trouble to key 
in the private key of many digits. Furthermore, since the 
user need not enter the private key by himself, a large 
numeric value consisting of 100 or more digits can be 

to used as the private key. This greatly improves network 
security. 

[01 89] In the above embodiment, the marking position 
information of the invention was written on the same 
disk, but the invention is not limited to the illustrated ex- 
's ample. For example, the information may be written on 
a floppy disk as a different medium. 
[0190] Furthermore, in the above embodiment, exam- 
ples have been described wherein an elliptic function or 
an RSA function is applied to the digital signature or dig- 
20 ital signature-like technique or encryption technique. 
However, the invention is not limited to the illustrated 
examples, for example, a secret key encryption function 
such as DES, or any other encryption technique may be 
used. 

25 [0191] Moreover, in the above embodiment, the posi- 
tion information was encrypted or was provided with a 
digital signature, but instead, the position information it- 
self may be written directly on the disk. In that case also, 
the invention is effective in preventing pirated disks from 

30 being made by copying the marking and its position in- 
formation 

[0192] The optical disk of the invention has a structure 
such that a reflective film is sandwiched directly or indi- 
rectly between two members resistant to laser light and 
35 a marking is formed by laser on the reflective film. The 
above embodiment has described examples in which 
this structure is used for a piracy prevention technique, 
but it will be appreciated that such a structure may also 
be applied to other techniques. In the above embodi- 
es ment, the optical disk of the invention has been de- 
scribed as being fabricated by laminating two substrates 
with an adhesive layer interposed therebetween. How- 
ever, the adhesive layer may be omitted, or instead, a 
member made of a different material, such as a protec- 
ts tive layer, may be used; that is, any suitable structure 
may be used as long as the reflective film is sandwiched 
directly or indirectly between two members resistant to 
laser light. Furthermore, in the above embodiment, the 
optical disk of the invention has been described as corn- 
so prising substrates as the members that are laminated 
together, but other members such as protective layers 
may be used; that is, any member that has resistance 
to laser light may be used. 

[0193] In the above embodiment, a combination of 
55 two kinds of cipher, secret key cipher and public key ci- 
pher, has been described as a representative example 
of a combination of multiple kinds of ciphers of different 
generations, but the invention is not limited to this par- 
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ticular example. For example, as an alternative combi- 
nation of different generations, public key cipher having 
a 256-bit secret key, which is less secure but can be 
processed by a slow CPU, and public key cipher having 
a 1024-bit secret key. which provides great security but 
can only be processed by a high-speed CPU, may be 
used. In this way, with a combination of public key ci- 
phers having different security levels, the same effect of 
preserving compatibility between different generations 
can be obtained. Furthermore, a combination of three 
kinds of ciphers of different generations, such as secret 
key cipher, low-security public key cipher, and high-se- 
curity public key cipher, may also be used. 

INDUSTRIAL APPLICABILITY 

[0194] As described above, in the present invention, 
for example, a marking is formed by a laser on a reflec- 
tive film of a disk holding data written thereon and at 
least position information of the marking or information 
concerning the position information is written on the disk 
in an encrypted form or with a digital signature append- 
ed thereto, therefore, it is possible to provide a greatly 
improved copy prevention capability as compared to pri- 
or known construction. 



Claims 

1 . An optical disk comprising: 

an embossed data zone having pits and projec- 
tions indicating data signals readable by light 
irradiation; and 

a barcode pattern indicating information formed 
on said embossed data zone. 

2. The optical disk according to claim 1 , wherein, 
said data signal indicated by said pits and projec- 
tions and said information indicated by said barcode 
are formed so as to be read by an optical head. 

3. A method for manufacturing an optical disk, com- 
prising: 

forming, on a substrate, an embossed data 
zone having pits and projections indicating data 
signals readable by light irradiation; and 

forming a barcode pattern indicating informa- 
tion on said embossed data zone. 

4. The method according to claim 3, wherein, 

said data signal indicated by said pits and projec- 
tions and said information indicated by said barcode 
are formed so as to be read by an optical head. 
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5. A method for reading information recorded on an 
optical disk, comprising: 

reading data signal indicated by pits and pro- 
5 jections formed in an embossed data zone; and 

reading information indicated by a barcode pat- 
tern formed on said embossed data zone. 

10 6. The method according to claim 5, wherein, 

said data signal indicated by said pits and projec- 
tions and said information indicated by said barcode 
are read by an optical head. 
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